| Package | Affected versions | Patched versions |
|---|---|---|
| online food ordering system | = 1.0 |
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action). The application fails to properly sanitize user input supplied to the "name" parameter. This allows an authenticated attacker to inject malicious SQL commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free