CVE-2023-5423

Summary

CVE-2023-5423 is a critical vulnerability identified in the SourceCodester Online Pizza Ordering System 1.0. The issue lies in the unsecured handling of user input in the file /admin/ajax.php?action=confirm_order. An attacker can exploit this vulnerability through sql injection by manipulating the id argument. The attack can be initiated remotely, making it a significant security risk. The identifier for this vulnerability is VDB-241384.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.