CVE-2021-28295

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

PT-2021-17841

Name of the Vulnerable Software and Affected Versions: Online Ordering System version 1.0 Description: The issue allows for unauthenticated SQL injection through the "/onlineordering/GPST/admin/design.php" API endpoint, which may lead to database information disclosure. Recommendations: For Onlin...

CVE-2021-28295: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

pheist.net XSS vulnerability

Vulnerable URL: http://pheist.net/design.php?id=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22817423 VIP website status:| No Check pheist.net SSL connection:| Grade: A-...

CVE-2005-4243: Undefined Security Weakness

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via the 1 popupid parameter in popups.edit.php; 2 so, 3 sb, and 4 nr parameters in customer.tickets.view.php; 5 subrackingid parameter in subscribers.tracking.edit.php; 6 delete...