Online Ordering System SQL Injection Vulnerability (CNVD-2022-55724)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the store/orderpage.php page, which could be exploited by an attacker to execute illegal SQL commands to steal sensitive database data.