Skip to main content

Online Food Ordering System CVE-2020-29297

CRITICAL
SQL Injection (CWE-89)
2023-01-20 cve@mitre.org
SQLi Online Food Ordering System
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
PoC Detected
Mar 30, 2026 - 18:15 vuln.today
Public exploit code
CVE Published
Jan 20, 2023 - 19:15 nvd
CRITICAL 9.8

DescriptionCVE.org

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0.

AnalysisAI

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0. Affected products include: Oretnom23 Online Food Ordering System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.

More in Online Food Ordering System

View all
CVE-2023-24646 CRITICAL POC
9.8 Feb 13

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attacker
CVE-2021-41644 CRITICAL POC
9.8 Oct 29

Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously craf
CVE-2023-30122 CRITICAL POC
9.8 May 05

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System

CVE-2023-45344 CRITICAL POC
9.8 Nov 02

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated critical
CVE-2023-45343 CRITICAL POC
9.8 Nov 02

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated critical
CVE-2023-45342 CRITICAL POC
9.8 Nov 02

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated critical
CVE-2023-45341 CRITICAL POC
9.8 Nov 02

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated critical
CVE-2023-45340 CRITICAL POC
9.8 Nov 02

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated critical
CVE-2023-45336 CRITICAL POC
9.8 Nov 02

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated critical
CVE-2023-45334 CRITICAL POC
9.8 Nov 02

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated critical
CVE-2023-45325 CRITICAL POC
9.8 Nov 02

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated critical
CVE-2023-45323 CRITICAL POC
9.8 Nov 02

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated critical

Same weakness CWE-89 – SQL Injection

View all
CVE-2023-48788 CRITICAL POC
9.8
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8
CVE-2015-7297 HIGH POC
7.5

Same technique SQLi

View all
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8
CVE-2013-0333 HIGH POC
7.5
CVE-2015-7297 HIGH POC
7.5

Share

CVE-2020-29297 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy