2 matches found
Sql injection
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...
CVE-2022-30798
Online Ordering System v1.0 (oretnom23) is vulnerable to SQL Injection in admin/viewreport.php. Root cause: inadequate input validation/exploitation of SQL statements. CVSSv3.1 impact: Confidentiality HIGH, Integrity HIGH, Availability HIGH (base 7.2); CVSSv2 base 6.5. No remediation details in t...