CVE-2022-31335

CVE-2022-31335 affects Online Ordering System 2.3.2 and is caused by an SQL injection in the admin stockin page: /ordering/admin/stockin/index.php?view=edit&id=. The connected Red Hat entry corroborates the same vulnerability. The CVSS data in the initial description indicates a high-impact issue...

CVE-2022-31336

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php...

CVE-2022-31336

Online Ordering System 2.3.2 is vulnerable to SQL Injection through /ordering/admin/stockin/loaddata.php. Multiple sources (NVD, Red Hat, CNVD, PRION, CNNVD) confirm the issue; CVSS metrics indicate high to critical impact (C/H/I/A), with network attack Vector and no authentication required. The ...

CVE-2022-31337

CVE-2022-31337 affects Online Ordering System 2.3.2. The vulnerability is a SQL Injection in the admin/category/index.php?view=edit&id= parameter, caused by lack of input validation/external SQL statement handling. Exploitation leads to data exposure/manipulation with high to critical impact per ...

CVE-2022-31337

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...

CVE-2022-31338

The CVE-2022-31338 entry concerns Online Ordering System 2.3.2 with an SQL Injection vulnerability in the admin UI: /ordering/admin/user/index.php?view=edit&id= (lack of input validation). Multiple sources (NVD, CNVD, Red Hat, CNVD, CNNVD, CVE listing) consistently describe an SQLi issue in versi...

CVE-2022-31338

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...

CVE-2022-31329: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php...

PT-2022-20318

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the admin/editproductetails.php endpoint. This allows for potential unauthorized access and manipulation of data. Recommendations...

CVE-2022-31338: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...

CVE-2022-30797: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php...

CVE-2022-30799: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php...

CVE-2022-30795: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php...

CVE-2022-30794: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php...

PT-2022-20321

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "admin/viewreport.php" endpoint. This allows for potential unauthorized access and manipulation of database content. No information is...

PT-2022-20322

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue is related to SQL injection via the store/orderpage.php endpoint. This allows for potential exploitation. No information is provided about the estimated number of affected devices or...

PT-2022-20689

Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue is related to SQL Injection, which can be exploited via the "/ordering/index.php?q=products&id=" endpoint. The id variable is vulnerable to SQL injection attacks...

PT-2022-20319

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability. It affects the admin/editproductimage.php endpoint. Recommendations For Online Ordering System version 1.0, consider disabling access to the...

PT-2022-20320

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "admin/vieworders.php" endpoint. This allows for potential unauthorized access and manipulation of database content. Recommendations For...

CVE-2022-30798: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php...