CVE-2022-30797

CVE-2022-30797 affects Online Ordering System 1.0 (admin/vieworders.php) and is caused by an SQL injection vulnerability. Affected component is the web application's admin view orders interface; the root cause is improper input handling/validation on that page. Documented impact includes potentia...

CVE-2021-25211

CVE-2021-25211 affects SourceCodester Ordering System v1.0. An arbitrary file upload vulnerability in ordering/admin/products/edit.php enables remote code execution. Exploitation details are not provided in the connected documents; CVSS metrics indicate Very High impact (C, I, A) with NETWORK att...

CVE-2022-30794

CVE-2022-30794 concerns Online Ordering System v1.0 by oretnom23, affected by a SQL Injection vulnerability in admin/editproductetails.php. The root cause is lack of validation/parameterization for SQL statements, enabling an attacker to inject SQL via that endpoint. Impact, as reflected in CVSS ...

CVE-2022-30795

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection in admin/editproductimage.php. The root cause is lack of input validation on that endpoint, enabling an attacker to manipulate SQL queries and potentially access or modify database data. CVSS metrics in the initial entry indi...

CVE-2022-30799

CVE-2022-30799 concerns the Online Ordering System v1.0 by oretnom23, where the vulnerability is an SQL injection in the file store/orderpage.php. The cited descriptions consistently attribute the flaw to a lack of validation of externally provided SQL statements, enabling potentially unauthorize...

CVE-2022-31355

CVE-2022-31355 affects Online Ordering System v2.3.2, with a SQL injection vulnerability exploitable through /ordering/index.php?q=category&search=. The root cause is lack of input validation on external input leading to SQL statement manipulation, enabling an attacker to access or modify data. D...

CVE-2022-31356

CVE-2022-31356 affects Online Ordering System v2.3.2. A SQL injection vulnerability exists in the admin store edit endpoint via /ordering/admin/store/index.php?view=edit&id=, arising from lack of input validation on external input. Reported impact includes the ability to leak or modify database d...

CVE-2022-30798

Online Ordering System v1.0 (oretnom23) is vulnerable to SQL Injection in admin/viewreport.php. Root cause: inadequate input validation/exploitation of SQL statements. CVSSv3.1 impact: Confidentiality HIGH, Integrity HIGH, Availability HIGH (base 7.2); CVSSv2 base 6.5. No remediation details in t...

CVE-2022-31337

CVE-2022-31337 affects Online Ordering System 2.3.2. The vulnerability is a SQL Injection in the admin/category/index.php?view=edit&id= parameter, caused by lack of input validation/external SQL statement handling. Exploitation leads to data exposure/manipulation with high to critical impact per ...

CVE-2022-31338

The CVE-2022-31338 entry concerns Online Ordering System 2.3.2 with an SQL Injection vulnerability in the admin UI: /ordering/admin/user/index.php?view=edit&id= (lack of input validation). Multiple sources (NVD, CNVD, Red Hat, CNVD, CNNVD, CVE listing) consistently describe an SQLi issue in versi...

CVE-2022-31357

CVE-2022-31357 affects Online Ordering System v2.3.2, with a SQL injection vulnerability in the admin inventory edit page ( /ordering/admin/inventory/index.php?view=edit&id= ). Red Hat and CNVD entries corroborate the vulnerability path and affected version. Root cause cited across sources is lac...

CVE-2022-31329

CVE-2022-31329 refers to the Online Ordering System By janobe 2.3.2, which is vulnerable to SQL Injection via the endpoint /ordering/admin/orders/loaddata.php. The connected documents consistently describe a database-command injection issue in this component, implying an impact that could expose ...

CVE-2022-31336

Online Ordering System 2.3.2 is vulnerable to SQL Injection through /ordering/admin/stockin/loaddata.php. Multiple sources (NVD, Red Hat, CNVD, PRION, CNNVD) confirm the issue; CVSS metrics indicate high to critical impact (C/H/I/A), with network attack Vector and no authentication required. The ...

CVE-2022-31335

CVE-2022-31335 affects Online Ordering System 2.3.2 and is caused by an SQL injection in the admin stockin page: /ordering/admin/stockin/index.php?view=edit&id=. The connected Red Hat entry corroborates the same vulnerability. The CVSS data in the initial description indicates a high-impact issue...

CVE-2022-31328

CVE-2022-31328 affects Online Ordering System By janobe version 2.3.2, with an SQL Injection vulnerability in the parameter id used by /ordering/admin/products/index.php?view=edit&id=. The issue originates from unsanitized external input in the SQL statement, enabling potentially unauthorized dat...

CVE-2022-36581

Online Ordering System v2.3.2 contains a SQL injection vulnerability in the /admin/login.php endpoint, exploitable via the user_email parameter. The CVE-2022-36581 entry has a base score of 7.5 (HIGH) with network access and no user interaction required, affecting confidentiality but not integrit...

CVE-2022-31327

CVE-2022-31327 concerns the product Online Ordering System By janobe 2.3.2 , which is vulnerable to SQL Injection via the query parameter in /ordering/index.php?q=products&id=. The connected sources consistently describe an input validation failure that allows attackers to inject SQL statements t...

CVE-2021-28295

CVE-2021-28295 affects Online Ordering System 1.0. The vulnerability is an unauthenticated SQL injection in the design.php path under /onlineordering/GPST/admin/ that may disclose database information. Multiple sources (NVD, Red Hat, PRION, CVE listings) corroborate the issue and timing, with exp...

CVE-2022-36580

CVE-2022-36580 affects Online Ordering System v2.3.2 via the /admin/products/controller.php?action=add component, enabling arbitrary code execution through an crafted PHP file due to an arbitrary file upload vulnerability. Public sources in the connected documents reiterate the exact vulnerable c...

CVE-2021-28294

CVE-2021-28294 affects Online Ordering System 1.0. The vulnerability is an arbitrary file upload via the endpoint /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE). Several connected sources corroborate the RCE risk and the specific upload vector; an expl...

CVE-2025-7755

CVE-2025-7755 affects code-projects Online Ordering System 1.0. The vulnerability resides in the processing of the file parameter in /admin/edit_product.php, where manipulation of the image argument enables unrestricted file uploads. This could allow remote attackers to upload arbitrary files, po...