CVE-2022-30797

CVE-2022-30797 affects Online Ordering System 1.0 (admin/vieworders.php) and is caused by an SQL injection vulnerability. Affected component is the web application's admin view orders interface; the root cause is improper input handling/validation on that page. Documented impact includes potentia...

CVE-2022-30797

Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php...

CVE-2022-30795

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php...

CVE-2022-30795

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection in admin/editproductimage.php. The root cause is lack of input validation on that endpoint, enabling an attacker to manipulate SQL queries and potentially access or modify database data. CVSS metrics in the initial entry indi...

CVE-2022-30794

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php...

CVE-2022-30794

CVE-2022-30794 concerns Online Ordering System v1.0 by oretnom23, affected by a SQL Injection vulnerability in admin/editproductetails.php. The root cause is lack of validation/parameterization for SQL statements, enabling an attacker to inject SQL via that endpoint. Impact, as reflected in CVSS ...

CVE-2022-31335

CVE-2022-31335 affects Online Ordering System 2.3.2 and is caused by an SQL injection in the admin stockin page: /ordering/admin/stockin/index.php?view=edit&id=. The connected Red Hat entry corroborates the same vulnerability. The CVSS data in the initial description indicates a high-impact issue...

CVE-2022-31335

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=...

CVE-2022-31336

Online Ordering System 2.3.2 is vulnerable to SQL Injection through /ordering/admin/stockin/loaddata.php. Multiple sources (NVD, Red Hat, CNVD, PRION, CNNVD) confirm the issue; CVSS metrics indicate high to critical impact (C/H/I/A), with network attack Vector and no authentication required. The ...

CVE-2022-31337

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...

CVE-2022-31337

CVE-2022-31337 affects Online Ordering System 2.3.2. The vulnerability is a SQL Injection in the admin/category/index.php?view=edit&id= parameter, caused by lack of input validation/external SQL statement handling. Exploitation leads to data exposure/manipulation with high to critical impact per ...

CVE-2022-31338

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...

CVE-2022-31338

The CVE-2022-31338 entry concerns Online Ordering System 2.3.2 with an SQL Injection vulnerability in the admin UI: /ordering/admin/user/index.php?view=edit&id= (lack of input validation). Multiple sources (NVD, CNVD, Red Hat, CNVD, CNNVD, CVE listing) consistently describe an SQLi issue in versi...

CVE-2022-31328: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=...

CVE-2022-31338: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...

CVE-2022-31335: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=...

CVE-2022-31337: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...

CVE-2022-31329: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php...

CVE-2022-31336: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php...

CVE-2022-31327: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=...