Sql injection

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...

CVE-2022-30798

Online Ordering System v1.0 (oretnom23) is vulnerable to SQL Injection in admin/viewreport.php. Root cause: inadequate input validation/exploitation of SQL statements. CVSSv3.1 impact: Confidentiality HIGH, Integrity HIGH, Availability HIGH (base 7.2); CVSSv2 base 6.5. No remediation details in t...

PT-2022-20321

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "admin/viewreport.php" endpoint. This allows for potential unauthorized access and manipulation of database content. No information is...

CVE-2022-30798: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...