379 matches found
CVE-2022-31327
CVE-2022-31327 concerns the product Online Ordering System By janobe 2.3.2 , which is vulnerable to SQL Injection via the query parameter in /ordering/index.php?q=products&id=. The connected sources consistently describe an input validation failure that allows attackers to inject SQL statements t...
CVE-2022-30799
CVE-2022-30799 concerns the Online Ordering System v1.0 by oretnom23, where the vulnerability is an SQL injection in the file store/orderpage.php. The cited descriptions consistently attribute the flaw to a lack of validation of externally provided SQL statements, enabling potentially unauthorize...
CVE-2022-30799
Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php...
CVE-2022-30798
Online Ordering System v1.0 (oretnom23) is vulnerable to SQL Injection in admin/viewreport.php. Root cause: inadequate input validation/exploitation of SQL statements. CVSSv3.1 impact: Confidentiality HIGH, Integrity HIGH, Availability HIGH (base 7.2); CVSSv2 base 6.5. No remediation details in t...
CVE-2022-30798
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...
CVE-2022-30797
CVE-2022-30797 affects Online Ordering System 1.0 (admin/vieworders.php) and is caused by an SQL injection vulnerability. Affected component is the web application's admin view orders interface; the root cause is improper input handling/validation on that page. Documented impact includes potentia...
CVE-2022-30797
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php...
CVE-2022-30795
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection in admin/editproductimage.php. The root cause is lack of input validation on that endpoint, enabling an attacker to manipulate SQL queries and potentially access or modify database data. CVSS metrics in the initial entry indi...
CVE-2022-30795
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php...
CVE-2022-30794
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php...
CVE-2022-30794
CVE-2022-30794 concerns Online Ordering System v1.0 by oretnom23, affected by a SQL Injection vulnerability in admin/editproductetails.php. The root cause is lack of validation/parameterization for SQL statements, enabling an attacker to inject SQL via that endpoint. Impact, as reflected in CVSS ...
CVE-2022-31335
CVE-2022-31335 affects Online Ordering System 2.3.2 and is caused by an SQL injection in the admin stockin page: /ordering/admin/stockin/index.php?view=edit&id=. The connected Red Hat entry corroborates the same vulnerability. The CVSS data in the initial description indicates a high-impact issue...
CVE-2022-31335
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=...
CVE-2022-31336
Online Ordering System 2.3.2 is vulnerable to SQL Injection through /ordering/admin/stockin/loaddata.php. Multiple sources (NVD, Red Hat, CNVD, PRION, CNNVD) confirm the issue; CVSS metrics indicate high to critical impact (C/H/I/A), with network attack Vector and no authentication required. The ...
CVE-2022-31337
CVE-2022-31337 affects Online Ordering System 2.3.2. The vulnerability is a SQL Injection in the admin/category/index.php?view=edit&id= parameter, caused by lack of input validation/external SQL statement handling. Exploitation leads to data exposure/manipulation with high to critical impact per ...
CVE-2022-31337
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...
CVE-2022-31338
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...
CVE-2022-31338
The CVE-2022-31338 entry concerns Online Ordering System 2.3.2 with an SQL Injection vulnerability in the admin UI: /ordering/admin/user/index.php?view=edit&id= (lack of input validation). Multiple sources (NVD, CNVD, Red Hat, CNVD, CNNVD, CVE listing) consistently describe an SQLi issue in versi...
Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi跨站脚本漏洞
Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 is...
