CVE-2023-45334

Summary

CVE-2023-45334: The Online Food Ordering System v1.0 suffers from unauthenticated SQL Injection vulnerabilities. The 'status' parameter in the routers/edit-orders.php resource fails to validate user input, allowing malicious characters to be sent directly to the database, potentially leading to unauthorized data access or modification. This issue poses a significant risk to the confidentiality and integrity of the affected system. Attackers can exploit this vulnerability by injecting malicious SQL commands through the 'status' parameter to manipulate or extract sensitive data, putting the confidentiality and integrity of the system at risk. Users are strongly advised to update their software to a patched version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.