CVE-2024-5635

A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument txtsearch leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-267091.

• CWE-89
• CWE-89

• https://github.com/L1OudFd8cl09/CVE/blob/main/03_06_2024_a.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.267091Permissions Required, VDB Entry
• https://vuldb.com/?id.267091Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.349244Third Party Advisory, VDB Entry
• https://github.com/L1OudFd8cl09/CVE/blob/main/03_06_2024_a.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.267091Permissions Required, VDB Entry
• https://vuldb.com/?id.267091Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.349244Third Party Advisory, VDB Entry

Published

Jun 4, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-56342IBM Verify Identity Access Digital Credentials 24.06 could a…5.3
• CVE-2024-56343IBM Verify Identity Access Digital Credentials 24.06 could a…6.5
• CVE-2024-56346IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a…10
• CVE-2024-56347IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechani…9.6
• CVE-2024-56348In JetBrains TeamCity before 2024.12 improper access control…4.3
• CVE-2024-56349In JetBrains TeamCity before 2024.12 improper access control…5.3
• CVE-2024-56350In JetBrains TeamCity before 2024.12 build credentials allow…4.3
• CVE-2024-56351In JetBrains TeamCity before 2024.12 access tokens were not …8.8
• CVE-2024-56352In JetBrains TeamCity before 2024.12 stored XSS was possible…5.4
• CVE-2024-56353In JetBrains TeamCity before 2024.12 backup file exposed use…6.5
• CVE-2024-56354In JetBrains TeamCity before 2024.12 password field value we…4.9
• CVE-2024-56355In JetBrains TeamCity before 2024.12 missing Content-Type he…5.4