Online Ordering System SQL Injection (CVE-2021-28295)

An SQL injection vulnerability exists in Online Ordering System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2021-28295

creationtimestamp| type| source ---|---|--- 2021-03-16 23:30:12+00:00| seen| https://t.me/cibsecurity/24975...

CVE-2021-28295

CVE-2021-28295 affects Online Ordering System 1.0. The vulnerability is an unauthenticated SQL injection in the design.php path under /onlineordering/GPST/admin/ that may disclose database information. Multiple sources (NVD, Red Hat, PRION, CVE listings) corroborate the issue and timing, with exp...

CVE-2020-28295

CVE-2020-28295 is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-28295

...