CVE-2022-1991

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo "><img src="" onerror="alert(document.cookie)"> leads to cross site scripting. It is possible to launch the attack remotely but it requires authentication. Exploit details have been disclosed to the public.
References
Link Resource
https://cyberthoth.medium.com/fast-food-ordering-system-1-0-cross-site-scripting-7927f4b1edd6 Exploit Third Party Advisory
https://vuldb.com/?id.201276 Permissions Required Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:fast_food_ordering_system_project:fast_food_ordering_system:1.0:*:*:*:*:*:*:*

History

14 Jun 2022, 16:15

Type Values Removed Values Added
References (MISC) https://cyberthoth.medium.com/fast-food-ordering-system-1-0-cross-site-scripting-7927f4b1edd6 - (MISC) https://cyberthoth.medium.com/fast-food-ordering-system-1-0-cross-site-scripting-7927f4b1edd6 - Exploit, Third Party Advisory
References (MISC) https://vuldb.com/?id.201276 - (MISC) https://vuldb.com/?id.201276 - Permissions Required, Third Party Advisory
First Time Fast Food Ordering System Project
Fast Food Ordering System Project fast Food Ordering System
CPE cpe:2.3:a:fast_food_ordering_system_project:fast_food_ordering_system:1.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 3.5
v3 : 4.8
CWE CWE-79

07 Jun 2022, 13:22

Type Values Removed Values Added
New CVE

Information

Published : 2022-06-07 12:15

Updated : 2023-12-10 14:22


NVD link : CVE-2022-1991

Mitre link : CVE-2022-1991

CVE.ORG link : CVE-2022-1991


JSON object : View

Products Affected

fast_food_ordering_system_project

  • fast_food_ordering_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')