Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2024-57328

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access.

  • Published: Jan 23, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-57328
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
projectworlds / online_food_ordering_system 1.0 1.0.x