Online Ordering System@1.0 Security Vulnerabilities and Issues — Online Ordering System@1.0 CVE List

Lucene search

Online Ordering System ProjectOnline Ordering System1.0

8 matches found

CVE•added 2021/07/22 8:15 p.m.•65 views

CVE-2021-25211

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php.

9.8CVSS9.6AI score0.01018EPSS

CVE•added 2022/06/02 2:15 p.m.•60 views

CVE-2022-30795

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php.

7.2CVSS7.3AI score0.0026EPSS

CVE•added 2022/06/02 2:15 p.m.•56 views

CVE-2022-30794

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php.

7.2CVSS7.3AI score0.0026EPSS

CVE•added 2022/06/02 2:15 p.m.•55 views

CVE-2022-30797

Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.

9.8CVSS9.8AI score0.0025EPSS

CVE•added 2022/06/02 2:15 p.m.•55 views

CVE-2022-30799

Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.

7.2CVSS7.4AI score0.0026EPSS

CVE•added 2022/06/02 2:15 p.m.•52 views

CVE-2022-30798

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.

7.2CVSS7.3AI score0.0026EPSS

CVE•added 2021/03/16 8:15 p.m.•40 views

CVE-2021-28294

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).

9.8CVSS9.7AI score0.02606EPSS

CVE•added 2021/03/16 8:15 p.m.•40 views

CVE-2021-28295

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.

7.5CVSS7.6AI score0.0061EPSS