CVE-2024-0247

A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of the component Admin Panel. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249778 is the identifier assigned to this vulnerability.

• CWE-89

• https://drive.google.com/file/d/13xhOZ3Zg-XoviVC744PPDorTxYbLUgbv/view?usp=sharingExploit, Third Party Advisory
• https://vuldb.com/?ctiid.249778Permissions Required, Third Party Advisory
• https://vuldb.com/?id.249778Third Party Advisory
• https://drive.google.com/file/d/13xhOZ3Zg-XoviVC744PPDorTxYbLUgbv/view?usp=sharingExploit, Third Party Advisory
• https://vuldb.com/?ctiid.249778Permissions Required, Third Party Advisory
• https://vuldb.com/?id.249778Third Party Advisory

Published

Jan 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0241encoded_id-rails versions before 1.0.0.beta2 are affected by…7.5
• CVE-2024-0242Under certain circumstances IQ Panel4 and IQ4 Hub panel soft…9.8
• CVE-2024-0243With the following crawler configuration: ```python from bs…8.1
• CVE-2024-0244Buffer overflow in CPCA PCFAX number process of Office Multi…9.8
• CVE-2024-0245A misconfiguration in the AndroidManifest.xml file in hamza4…5.5
• CVE-2024-0246A vulnerability classified as problematic has been found in …6.1
• CVE-2024-0248The EazyDocs WordPress plugin before 2.4.0 re-introduced CVE…4.3
• CVE-2024-0249The Advanced Schedule Posts WordPress plugin through 2.1.8 d…7.1
• CVE-2024-0250The Analytics Insights for Google Analytics 4 (AIWP) WordPre…6.1
• CVE-2024-0251The Advanced Woo Search plugin for WordPress is vulnerable t…6.1
• CVE-2024-0252ManageEngine ADSelfService Plus versions 6401 and below are …8.8
• CVE-2024-0253ManageEngine ADAudit Plus versions 7270 and below are vulner…8.8