Simple Food Ordering System vulnerabilities

A vulnerability in Simple Food Ordering System 1.0 affects the /listorder.php file. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability has been found in code-projects Simple Food Ordering System 1.0 affecting some unknown functionality of the file /saveorder.php. Manipulation of the ID argument leads to SQL injection.

A cross-site scripting (XSS) vulnerability was detected in code-projects Simple Food Ordering System 1.0 in an unknown function of /editproduct.php. Manipulation of the pname/category/price arguments allows injection of malicious script. The attack can be launched remotely and the exploit is publicly available.

A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument pname/category/price results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

A cross-site scripting (XSS) vulnerability was identified in code-projects Simple Food Ordering System 1.0 in an unknown part of /editcategory.php. Manipulation of the pname argument leads to injection of malicious script. The attack can be launched remotely and the exploit is publicly available.