1935 matches found
CVE-2022-31355
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=...
CVE-2022-31356
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=...
CVE-2022-31357
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...
Sql injection
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=...
Sql injection
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...
Sql injection
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=...
CVE-2022-31355
CVE-2022-31355 affects Online Ordering System v2.3.2, with a SQL injection vulnerability exploitable through /ordering/index.php?q=category&search=. The root cause is lack of input validation on external input leading to SQL statement manipulation, enabling an attacker to access or modify data. D...
CVE-2022-31355
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=...
CVE-2022-31356
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=...
CVE-2022-31357
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...
CVE-2022-31357
CVE-2022-31357 affects Online Ordering System v2.3.2, with a SQL injection vulnerability in the admin inventory edit page ( /ordering/admin/inventory/index.php?view=edit&id= ). Red Hat and CNVD entries corroborate the vulnerability path and affected version. Root cause cited across sources is lac...
CVE-2022-31356
CVE-2022-31356 affects Online Ordering System v2.3.2. A SQL injection vulnerability exists in the admin store edit endpoint via /ordering/admin/store/index.php?view=edit&id=, arising from lack of input validation on external input. Reported impact includes the ability to leak or modify database d...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/inventory/index.php?view=edit & id=Lack of validation of external input SQL statemen...
CVE-2022-31357: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...
CVE-2022-31356: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=...
CVE-2022-31355: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business. an SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/store/index.php?view=edit&id= Lack of validation of external input SQL statements c...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version v2.3.2 is vulnerable to SQL injection, which originates from /ordering/index.php?q=category&search=Lack of validation of external input SQL statement validation, an attack...
PT-2022-20712
Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/ordering/admin/store/index.php?view=edit&id=" API endpoint, specifically through the id variable. This...