CVE-2023-45342 describes multiple unauthenticated SQL injection vulnerabilities in Online Food Ordering System v1.0, specifically impacting the 'phone' parameter within the routers/register-router.php resource due to insufficient input validation. This vulnerability carries a critical CVSS score of 9.8, indicating a high risk with network-based attacks, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) or KEV catalog entries exist, and community discussion is minimal, its high FAUCET Risk Score of 76/100 and media coverage suggest it warrants attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:projectworlds:online_food_ordering_system:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.