PT-2022-20691

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue allows for SQL Injection via the "/ordering/admin/orders/loaddata.php" API endpoint. Recommendations For version 2.3.2, update to a newer version that contains a fix for this...

CVE-2022-31329: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php...