CVE-2023-0305

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in SourceCodester Online Food Ordering System. This vulnerability affects unknown code of the file admin_class.php of the component Login Module. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-218386 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jan 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-03065.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.CVE-2023-03079.8Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10.CVE-2023-03085.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.CVE-2023-03095.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.CVE-2023-03105.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.CVE-2023-03119.8Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.CVE-2023-03126.1Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.CVE-2023-03135.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.CVE-2023-03146.1Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10.CVE-2023-03158.8Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.CVE-2023-03165.5Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0.CVE-2023-03174.9Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.
CVE-2023-0305: High severity, CVSS 7.5 | Vulnix