canteen management system vulnerabilities and fixes

Recent CVEs affecting canteen management system, with upgrade or downgrade steps. 33 tracked.

Also searched as: canteenmanagementsystem.

canteen management system has 33 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-03-17. Highest priority: CVE-2023-23279 (score 59/100).

• CVE-2023-23279 CRITICAL 9.8 DOWNGRADE Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php.
• CVE-2023-1475 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System
• CVE-2023-1461 MEDIUM 6.3 DOWNGRADE A vulnerability was found in SourceCodester Canteen Management System 1.0
• CVE-2023-1459 MEDIUM 6.3 DOWNGRADE A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical
• CVE-2023-0781 MEDIUM 6.3 DOWNGRADE A vulnerability was found in SourceCodester Canteen Management System 1.0
• CVE-2023-0679 MEDIUM 5.0 DOWNGRADE A vulnerability was found in SourceCodester Canteen Management System 1.0
• CVE-2023-0571 LOW 3.5 DOWNGRADE A vulnerability has been found in SourceCodester Canteen Management System 1.0 and classified as problematic
• CVE-2022-4403 MEDIUM 6.3 MITIGATE A vulnerability classified as critical was found in SourceCodester Canteen Management System
• CVE-2022-4253 LOW 3.5 MITIGATE A vulnerability was found in SourceCodester Canteen Management System
• CVE-2022-4252 LOW 3.5 MITIGATE A vulnerability was found in SourceCodester Canteen Management System
• CVE-2022-4234 LOW 3.5 MITIGATE A vulnerability was found in SourceCodester Canteen Management System
• CVE-2022-4222 MEDIUM 5.0 DOWNGRADE A vulnerability was found in SourceCodester Canteen Management System
• CVE-2022-4091 LOW 3.5 MITIGATE A vulnerability was found in SourceCodester Canteen Management System
• CVE-2022-43331 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-43330 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-43329 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-43328 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-43292 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-43291 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-43290 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-43278 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId pa
• CVE-2022-43277 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthap
• CVE-2022-43276 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId param
• CVE-2022-43275 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappa
• CVE-2022-43265 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0
• CVE-2022-43233 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid paramete
• CVE-2022-43232 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid paramete
• CVE-2022-43231 HIGH 7.2 DOWNGRADE Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappa
• CVE-2022-43146 HIGH 7.2 DOWNGRADE An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows a
• CVE-2022-43144 MEDIUM 5.4 DOWNGRADE A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbit
• CVE-2022-43049 HIGH 7.2 DOWNGRADE Canteen Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the compone
• CVE-2022-3584 MEDIUM 6.3 DOWNGRADE A vulnerability was found in SourceCodester Canteen Management System 1.0
• CVE-2022-3583 HIGH 7.3 DOWNGRADE A vulnerability was found in SourceCodester Canteen Management System 1.0

FAQ

How do I fix canteen management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is canteen management system being exploited right now?

None of the tracked canteen management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which canteen management system CVE should I patch first?

CVE-2023-23279 currently ranks highest (59/100): Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php..

RSS feed for canteen management system · ← Back to latest CVEs