1935 matches found
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/viewreport.php page, which...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/user/index.php?view=edit&id=page The lack of validation of externally entered SQL...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version 2.3.2 is vulnerable to a SQL injection vulnerability that originates in /ordering/index.php?q=products&id=The page lacks validation for external input SQL statements, whic...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/stockin/index.php?view=edit&id= The page lacks validation of externally entered SQL...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/category/index.php?view=edit&id = The page lacks validation of externally entered SQL...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business. SQL statement validation, which can be exploited to execute illegal SQL commands to steal sensitive database data...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/editproductimage.php page,...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/products/index.php?view=edit&id = The page lacks validation for external input SQL...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the store/orderpage.php page, which cou...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/editproductetails.php page,...
CVE-2022-31329
CVE-2022-31329 refers to the Online Ordering System By janobe 2.3.2, which is vulnerable to SQL Injection via the endpoint /ordering/admin/orders/loaddata.php. The connected documents consistently describe a database-command injection issue in this component, implying an impact that could expose ...
CVE-2022-31329
Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php...
CVE-2022-31328
Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=...
CVE-2022-31328
CVE-2022-31328 affects Online Ordering System By janobe version 2.3.2, with an SQL Injection vulnerability in the parameter id used by /ordering/admin/products/index.php?view=edit&id=. The issue originates from unsanitized external input in the SQL statement, enabling potentially unauthorized dat...
CVE-2022-31327
Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=...
CVE-2022-31327
CVE-2022-31327 concerns the product Online Ordering System By janobe 2.3.2 , which is vulnerable to SQL Injection via the query parameter in /ordering/index.php?q=products&id=. The connected sources consistently describe an input validation failure that allows attackers to inject SQL statements t...
CVE-2022-30799
CVE-2022-30799 concerns the Online Ordering System v1.0 by oretnom23, where the vulnerability is an SQL injection in the file store/orderpage.php. The cited descriptions consistently attribute the flaw to a lack of validation of externally provided SQL statements, enabling potentially unauthorize...
CVE-2022-30799
Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php...
CVE-2022-30798
Online Ordering System v1.0 (oretnom23) is vulnerable to SQL Injection in admin/viewreport.php. Root cause: inadequate input validation/exploitation of SQL statements. CVSSv3.1 impact: Confidentiality HIGH, Integrity HIGH, Availability HIGH (base 7.2); CVSSv2 base 6.5. No remediation details in t...