Critical severity9.8NVD Advisory· Published Jan 23, 2025· Updated Jun 17, 2026

CVE-2024-57328

Description

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Projectworlds/Online Food Ordering System
cpe:2.3:a:projectworlds:online_food_ordering_system:1.0:*:*:*:*:*:*:*
Online Food Ordering System/Online Food Ordering Systemdescription
Fast Food Ordering System/Fast Food Ordering Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57328nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000