3 matches found
Sql injection
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...
6.5CVSS7.3AI score0.01008EPSS
SaveExploits1References1Affected Software1
CVE-2022-30798
Online Ordering System v1.0 (oretnom23) is vulnerable to SQL Injection in admin/viewreport.php. Root cause: inadequate input validation/exploitation of SQL statements. CVSSv3.1 impact: Confidentiality HIGH, Integrity HIGH, Availability HIGH (base 7.2); CVSSv2 base 6.5. No remediation details in t...
7.2CVSS7.3AI score0.01008EPSS
SaveExploits1References1Affected Software1
CVE-2022-30798: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...
7.2CVSS7.2AI score0.01008EPSS
SaveExploits1References2
20