These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A security vulnerability was detected in the kishor-23 food-waste-management-system. The vulnerability affects an unknown functionality of the file admin/admin.php of the component Role Attribute Handler. Manipulation of the argument Name leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Multiple endpoints are affected. The project [truncated]
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes missing authentication. The attack can be initiated remotely.
A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument order_id/delivery_person_id results in sql injection. It is possible to launch the attack remotely. The exploi [truncated]
A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order_id/delivery_person_id leads to sql injection. It is possible to initiate the attack remotely. The exploit is pu [truncated]
A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql injection. The attack may be performed from remote. Defenders should assess exposure and prioritize verifying th [truncated]
A SQL injection vulnerability was found in the food-waste-management-system project, specifically in the insert function of the fooddonateform.php file. The vulnerability is triggered by manipulating the image-choice argument and can be exploited remotely. The project uses a rolling release strategy, making it difficult to specify affected or updated versions. The issue was reported to the project, but no [truncated]