1602 matches found
CVE-2022-31329
Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php...
CVE-2022-31329
CVE-2022-31329 refers to the Online Ordering System By janobe 2.3.2, which is vulnerable to SQL Injection via the endpoint /ordering/admin/orders/loaddata.php. The connected documents consistently describe a database-command injection issue in this component, implying an impact that could expose ...
CVE-2022-31328
Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=...
CVE-2022-31328
CVE-2022-31328 affects Online Ordering System By janobe version 2.3.2, with an SQL Injection vulnerability in the parameter id used by /ordering/admin/products/index.php?view=edit&id=. The issue originates from unsanitized external input in the SQL statement, enabling potentially unauthorized dat...
CVE-2022-31327
Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=...
CVE-2022-31327
CVE-2022-31327 concerns the product Online Ordering System By janobe 2.3.2 , which is vulnerable to SQL Injection via the query parameter in /ordering/index.php?q=products&id=. The connected sources consistently describe an input validation failure that allows attackers to inject SQL statements t...
CVE-2022-30799
CVE-2022-30799 concerns the Online Ordering System v1.0 by oretnom23, where the vulnerability is an SQL injection in the file store/orderpage.php. The cited descriptions consistently attribute the flaw to a lack of validation of externally provided SQL statements, enabling potentially unauthorize...
CVE-2022-30799
Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php...
CVE-2022-30798
Online Ordering System v1.0 (oretnom23) is vulnerable to SQL Injection in admin/viewreport.php. Root cause: inadequate input validation/exploitation of SQL statements. CVSSv3.1 impact: Confidentiality HIGH, Integrity HIGH, Availability HIGH (base 7.2); CVSSv2 base 6.5. No remediation details in t...
CVE-2022-30798
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...
CVE-2022-30797
CVE-2022-30797 affects Online Ordering System 1.0 (admin/vieworders.php) and is caused by an SQL injection vulnerability. Affected component is the web application's admin view orders interface; the root cause is improper input handling/validation on that page. Documented impact includes potentia...
CVE-2022-30797
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php...
CVE-2022-30795
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php...
CVE-2022-30795
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection in admin/editproductimage.php. The root cause is lack of input validation on that endpoint, enabling an attacker to manipulate SQL queries and potentially access or modify database data. CVSS metrics in the initial entry indi...
CVE-2022-30794
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php...
CVE-2022-30794
CVE-2022-30794 concerns Online Ordering System v1.0 by oretnom23, affected by a SQL Injection vulnerability in admin/editproductetails.php. The root cause is lack of validation/parameterization for SQL statements, enabling an attacker to inject SQL via that endpoint. Impact, as reflected in CVSS ...
CVE-2022-31335
CVE-2022-31335 affects Online Ordering System 2.3.2 and is caused by an SQL injection in the admin stockin page: /ordering/admin/stockin/index.php?view=edit&id=. The connected Red Hat entry corroborates the same vulnerability. The CVSS data in the initial description indicates a high-impact issue...
CVE-2022-31335
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=...
CVE-2022-31336
Online Ordering System 2.3.2 is vulnerable to SQL Injection through /ordering/admin/stockin/loaddata.php. Multiple sources (NVD, Red Hat, CNVD, PRION, CNNVD) confirm the issue; CVSS metrics indicate high to critical impact (C/H/I/A), with network attack Vector and no authentication required. The ...