CVE-2023-1365
published 2023-03-13CVE-2023-1365: A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality…
PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.75%
50.7th percentile
A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222872.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| online_pizza_ordering_system_project | online_pizza_ordering_system | — | — |
| sourcecodester | online_pizza_ordering_system | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jxqg-p2g2-h68r: A vulnerability was found in SourceCodester Online Pizza Ordering System 1
ghsa_unreviewed·2023-03-13
CVE-2023-1365 [HIGH] CWE-89 GHSA-jxqg-p2g2-h68r: A vulnerability was found in SourceCodester Online Pizza Ordering System 1
A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222872.
Red Hat
kernel: x86/MCE/AMD: Use an u64 for bank_map
vendor_redhat·2025-10-01·CVSS 5.5
CVE-2023-53474 [MEDIUM] CWE-190 kernel: x86/MCE/AMD: Use an u64 for bank_map
kernel: x86/MCE/AMD: Use an u64 for bank_map
In the Linux kernel, the following vulnerability has been resolved:
x86/MCE/AMD: Use an u64 for bank_map
Thee maximum number of MCA banks is 64 (MAX_NR_BANKS), see
a0bc32b3cacf ("x86/mce: Increase maximum number of banks to 64").
However, the bank_map which contains a bitfield of which banks to
initialize is of type unsigned int and that overflows when those bit
numbers are >= 32, leading to UBSAN complaining correctly:
UBSAN: shift-out-of-bounds in arch/x86/kernel/cpu/mce/amd.c:1365:38
shift exponent 32 is too large for 32-bit type 'int'
Change the bank_map to a u64 and use the proper BIT_ULL() macro when
modifying bits in there.
[ bp: Rewrite commit message. ]
Statement: The patch fixes an out-of-bounds bit shift / incorrect bitmask width in
Red Hat
kernel: FS:JFS:UBSAN: array-index-out-of-bounds in dbAdjTree
vendor_redhat·2024-03-06·CVSS 7.8
CVE-2023-52604 [HIGH] CWE-125 kernel: FS:JFS:UBSAN: array-index-out-of-bounds in dbAdjTree
kernel: FS:JFS:UBSAN: array-index-out-of-bounds in dbAdjTree
In the Linux kernel, the following vulnerability has been resolved:
FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
Syzkaller reported the following issue:
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2867:6
index 196694 is out of range for type 's8[1365]' (aka 'signed char[1365]')
CPU: 1 PID: 109 Comm: jfsCommit Not tainted 6.6.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106
ubsan_epilogue lib/ubsan.c:217 [inline]
__ubsan_handle_out_of_bounds+0x11c/0x150 lib/ubsan.c:348
dbAdjTree+0x474/0x4f0 fs/jfs/jfs_dmap.c:2867
dbJoin+0x210/0x2d0 fs/jfs/jfs_dmap.c:283
No detection rules found.
No public exploits indexed.
https://github.com/E1CHO/cve_hub/blob/main/Online%20Pizza%20Ordering%20System/Online%20Pizza%20Ordering%20System%20sql%20vlun(3).pdfhttps://vuldb.com/?ctiid.222872https://vuldb.com/?id.222872https://github.com/E1CHO/cve_hub/blob/main/Online%20Pizza%20Ordering%20System/Online%20Pizza%20Ordering%20System%20sql%20vlun(3).pdfhttps://vuldb.com/?ctiid.222872https://vuldb.com/?id.222872
2023-03-13
Published