CVE-2023-0988

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=save_user. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221681 was assigned to this vulnerability.

• CWE-352

• https://github.com/1MurasaKi/PizzaCSRF_report/tree/main/vender/Online%20Pizza%20Ordering%20SystemExploit, Third Party Advisory
• https://vuldb.com/?ctiid.221681Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.221681Third Party Advisory, VDB Entry
• https://github.com/1MurasaKi/PizzaCSRF_report/tree/main/vender/Online%20Pizza%20Ordering%20SystemExploit, Third Party Advisory
• https://vuldb.com/?ctiid.221681Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.221681Third Party Advisory, VDB Entry

Published

Feb 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0981A vulnerability was found in SourceCodester Yoga Class Regis…9.8
• CVE-2023-0982A vulnerability was found in SourceCodester Yoga Class Regis…9.8
• CVE-2023-0983The stylish-cost-calculator-premium WordPress plugin before …6.1
• CVE-2023-0985An Authorization Bypass vulnerability was found in MB Connec…8.8
• CVE-2023-0986A vulnerability classified as critical has been found in Sou…9.8
• CVE-2023-0987A vulnerability classified as problematic was found in Sourc…5.4
• CVE-2023-0989An information disclosure issue in GitLab CE/EE affecting al…5.7
• CVE-2023-0992The Shield Security plugin for WordPress is vulnerable to st…6.1
• CVE-2023-0993The Shield Security plugin for WordPress is vulnerable to Mi…4.3
• CVE-2023-0994Exposure of Sensitive Information to an Unauthorized Actor i…7.5
• CVE-2023-0995Cross-site Scripting (XSS) - Stored in GitHub repository uni…5.4
• CVE-2023-0996 There is a vulnerability in the strided image data parsing …7.8