Lucene search
+L

1935 matches found

CNVD
CNVD
•added 2022/06/09 12:00 a.m.•47 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55715)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/editproductetails.php page,...

7.2CVSS3.3AI score0.00857EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•48 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55716)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/editproductimage.php page,...

7.2CVSS3.3AI score0.01008EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•50 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55719)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/viewreport.php page, which...

7.2CVSS3.7AI score0.01008EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•53 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55714)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/vieworders.php page, which...

9.8CVSS3.7AI score0.01137EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•67 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55723)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/stockin/index.php?view=edit&id= The page lacks validation of externally entered SQL...

9.8CVSS4.4AI score0.01122EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•77 views

Online Ordering System SQL注入漏洞

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/user/index.php?view=edit&id=page The lack of validation of externally entered SQL...

9.8CVSS4.9AI score0.01122EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•38 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55722)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/products/index.php?view=edit&id = The page lacks validation for external input SQL...

9.8CVSS4.6AI score0.01122EPSS
SaveExploits1References1
OSV
OSV
•added 2022/06/07 12:15 p.m.•11 views

CVE-2022-1991

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

4.8CVSS4AI score0.00601EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/07 12:15 p.m.•21 views

Cross site scripting

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

3.5CVSS5AI score0.00601EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/06/03 2:25 p.m.•9 views

CVE-2022-1991 Fast Food Ordering System Master List Master.php cross site scripting

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

3.5CVSS5.2AI score0.00601EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/06/03 2:25 p.m.•39 views

CVE-2022-1991 Fast Food Ordering System Master List Master.php cross site scripting

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

3.5CVSS5.2AI score0.00601EPSS
SaveExploits1References2
CVE
CVE
•added 2022/06/03 2:25 p.m.•78 views

CVE-2022-1991

CVE-2022-1991 affects Fast Food Ordering System 1.0, targeting the Master.php Master List. The issue is a cross-site scripting (XSS) vulnerability caused by unsanitized input in the Description parameter (example payload: foo "'>). Exploitation is possible remotely but requires authentication....

4.8CVSS4.4AI score0.00601EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/03 12:00 a.m.•8 views

CVE-2022-1991: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

4.8CVSS4AI score0.00601EPSS
SaveExploits1References3
OSV
OSV
•added 2022/06/02 2:15 p.m.•15 views

CVE-2022-31336

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php...

9.8CVSS5.8AI score0.01122EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•8 views

CVE-2022-31336

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php...

9.8CVSS7.4AI score0.01122EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•13 views

CVE-2022-31338

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...

9.8CVSS7.4AI score0.01122EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/02 2:15 p.m.•13 views

CVE-2022-31329

Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php...

9.8CVSS5.8AI score0.01122EPSS
SaveExploits1References1
OSV
OSV
•added 2022/06/02 2:15 p.m.•12 views

CVE-2022-31327

Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=...

9.8CVSS5.8AI score0.01137EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•12 views

CVE-2022-31337

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...

9.8CVSS7.4AI score0.01122EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•14 views

CVE-2022-31328

Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=...

9.8CVSS7.4AI score0.01122EPSS
SaveExploits1References2
Rows per page
Query Builder