Sql injection

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

PT-2021-17841

Name of the Vulnerable Software and Affected Versions: Online Ordering System version 1.0 Description: The issue allows for unauthenticated SQL injection through the "/onlineordering/GPST/admin/design.php" API endpoint, which may lead to database information disclosure. Recommendations: For Onlin...