2 matches found
Sql injection
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php...
CVE-2022-31336
Online Ordering System 2.3.2 is vulnerable to SQL Injection through /ordering/admin/stockin/loaddata.php. Multiple sources (NVD, Red Hat, CNVD, PRION, CNNVD) confirm the issue; CVSS metrics indicate high to critical impact (C/H/I/A), with network attack Vector and no authentication required. The ...