PT-2022-20318

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the admin/editproductetails.php endpoint. This allows for potential unauthorized access and manipulation of data. Recommendations...

CVE-2022-30797: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php...

CVE-2022-30799: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php...

CVE-2022-30795: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php...

CVE-2022-30794: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php...

PT-2022-20321

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "admin/viewreport.php" endpoint. This allows for potential unauthorized access and manipulation of database content. No information is...

Fast Food Ordering System 1.0 Cross Site Scripting

Title: Fast Food Ordering System 1.0 Stored Cross-Site Scripting Author: Ashish Kumar Date: 05.31.2022 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15366/fast-food-ordering-system-phpoop-free-source-code.html Reference:...

PT-2022-20693

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue concerns SQL Injection via the "/ordering/admin/stockin/loaddata.php" API endpoint. This allows for potential manipulation of database queries. No information is provided about the...

PT-2022-20322

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue is related to SQL injection via the store/orderpage.php endpoint. This allows for potential exploitation. No information is provided about the estimated number of affected devices or...

PT-2022-20689

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue is related to SQL Injection, which can be exploited via the "/ordering/index.php?q=products&id=" endpoint. The id variable is vulnerable to SQL injection attacks...

CVE-2022-30798: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...

CVE-2022-31327: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=...

PT-2022-20695

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the /ordering/admin/user/index.php?view=edit&id= API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized access o...

CVE-2022-31337: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...

CVE-2022-31335: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=...

CVE-2022-31336: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php...

CVE-2022-31328: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=...

PT-2022-20692

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue is related to SQL Injection. It can be exploited via the "/ordering/admin/stockin/index.php?view=edit&id=" endpoint. The id variable is vulnerable to SQL injection attacks...

PT-2022-20691

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue allows for SQL Injection via the "/ordering/admin/orders/loaddata.php" API endpoint. Recommendations For version 2.3.2, update to a newer version that contains a fix for this...

PT-2022-20690

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue is related to SQL Injection. It affects the /ordering/admin/products/index.php?view=edit&id= API endpoint, where the id parameter is vulnerable. Recommendations For version...