CVE-2024-57328

critical · 9.8

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access.

9.8

CVSS

0.6%

EPSS (exploit prob.)

46th

EPSS percentile

2025-01-23

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
projectworlds	online_food_ordering_system	1.0

Check a specific version with /api/v1/cve/match.

References

https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57328

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-57328