CVE-2022-3714

CVE-2022-3714 affects SourceCodester Online Medicine Ordering System 1.0. The vulnerability is a SQL injection in an unknown function of the file admin/?page=orders/view_order, triggered by manipulating the id parameter, allowing remote exploitation. Documents consistently describe this issue as ...

PT-2022-23834 · Unknown · Sourcecodester Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Medicine Ordering System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file "admin/?page=orders/view order". The manipulation of the id argument leads to SQL...

Online Medicine Ordering System 安全漏洞

Online Medicine Ordering System is an online medicine ordering system developed by Carlo Montero. A security vulnerability exists in version 1.0 of the Online Medicine Ordering System due to an unknown function in its /omos/admin/?page=user/list file that operates on the parameters First...

The vulnerability of the router.php implementation of the POST Parameter Handler in the Food Ordering Management System allows a perpetrator to execute arbitrary SQL code.

The vulnerability in the implementation of the router.php script of the POST Parameter Handler component of the Food Ordering Management System’s control system is related to insufficient cleaning of special elements during the processing of the user name parameter. Exploiting this vulnerability...

SourceCodester Food Ordering Management System 安全漏洞

Food Ordering Management System is a food ordering management system from Carlo Montero's personal developer. The Food Ordering Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements by username, and can be exploited by attackers...

CVE-2022-36759

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?resid=...

Sql injection

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?resid=...

CVE-2022-36759

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?resid=...

CVE-2022-36759

CVE-2022-36759 affects Online Food Ordering System v1.0 with a SQL injection in the /dishes.php?res_id= parameter. The NVD entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, low complexity, and no privileges/UI required, impacting confidentiality, integrity, and avai...

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system. Online Food Ordering System suffers from a SQL injection vulnerability that can be exploited by an attacker to perform SQL injection via the component /dish .php?resid=...

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

CVE-2022-36580

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-36580

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

CVE-2022-36580

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...

Privilege escalation

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...

Sql injection

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

CVE-2022-36581

Online Ordering System v2.3.2 contains a SQL injection vulnerability in the /admin/login.php endpoint, exploitable via the user_email parameter. The CVE-2022-36581 entry has a base score of 7.5 (HIGH) with network access and no user interaction required, affecting confidentiality but not integrit...