cvedb.io
CVE-2024-57328
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2025-01-23T22:15:14.943 · Last modified 2026-06-17T08:13:29.843

Summary

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access.

Affected products

projectworlds — online_food_ordering_system

Does this affect you?

Add your gear to cvedb and we'll alert you only when projectworlds ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.