PT-2022-20690

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue is related to SQL Injection. It affects the /ordering/admin/products/index.php?view=edit&id= API endpoint, where the id parameter is vulnerable. Recommendations For version...

PT-2022-20691

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue allows for SQL Injection via the "/ordering/admin/orders/loaddata.php" API endpoint. Recommendations For version 2.3.2, update to a newer version that contains a fix for this...

PT-2022-20693

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue concerns SQL Injection via the "/ordering/admin/stockin/loaddata.php" API endpoint. This allows for potential manipulation of database queries. No information is provided about the...

PT-2022-20689

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue is related to SQL Injection, which can be exploited via the "/ordering/index.php?q=products&id=" endpoint. The id variable is vulnerable to SQL injection attacks...

PT-2022-20318

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the admin/editproductetails.php endpoint. This allows for potential unauthorized access and manipulation of data. Recommendations...

CVE-2022-31328: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=...

CVE-2022-31329: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php...

CVE-2022-31327: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=...

CVE-2022-30799: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php...

CVE-2022-30797: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php...

CVE-2022-30795: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php...

CVE-2022-30794: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php...

CVE-2022-31336: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php...

CVE-2022-31337: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...

CVE-2022-31338: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...

CVE-2022-31335: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=...

PT-2022-20695

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the /ordering/admin/user/index.php?view=edit&id= API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized access o...

CVE-2022-30798: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...

PT-2022-20694

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the "/ordering/admin/category/index.php?view=edit&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized da...

Online Food Ordering System Arbitrary File Upload Vulnerability

Online Food Ordering System is an online food ordering system. An arbitrary file upload vulnerability exists in Online Food Ordering System version 1.0, which stems from the lack of validation of uploaded files in the Select Image feature, and can be exploited to upload a malicious file that can ...