Online Ordering System@2.3.2 Security Vulnerabilities and Issues — Online Ordering System@2.3.2 CVE List

Lucene search

Online Ordering System ProjectOnline Ordering System2.3.2

12 matches found

CVE•added 2022/06/02 2:15 p.m.•60 views

CVE-2022-31338

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.

9.8CVSS9.8AI score0.0025EPSS

CVE•added 2022/06/17 2:15 p.m.•60 views

CVE-2022-31356

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.

9.8CVSS9.8AI score0.0025EPSS

CVE•added 2022/06/02 2:15 p.m.•59 views

CVE-2022-31337

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=.

9.8CVSS9.8AI score0.00291EPSS

CVE•added 2022/06/17 2:15 p.m.•51 views

CVE-2022-31357

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.

9.8CVSS9.8AI score0.0025EPSS

CVE•added 2022/06/02 2:15 p.m.•50 views

CVE-2022-31329

Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php.

9.8CVSS9.8AI score0.0025EPSS

CVE•added 2022/06/02 2:15 p.m.•49 views

CVE-2022-31328

Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=.

9.8CVSS9.9AI score0.0025EPSS

CVE•added 2022/06/17 2:15 p.m.•49 views

CVE-2022-31355

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=.

9.8CVSS9.8AI score0.0025EPSS

CVE•added 2022/06/02 2:15 p.m.•48 views

CVE-2022-31335

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=.

9.8CVSS9.8AI score0.0025EPSS

CVE•added 2022/06/02 2:15 p.m.•48 views

CVE-2022-31336

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php.

9.8CVSS9.8AI score0.0025EPSS

CVE•added 2022/06/02 2:15 p.m.•46 views

CVE-2022-31327

Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=.

9.8CVSS9.8AI score0.00235EPSS

CVE•added 2022/08/31 8:15 p.m.•40 views

CVE-2022-36580

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file.

7.2CVSS7.3AI score0.00285EPSS

CVE•added 2022/08/31 8:15 p.m.•38 views

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.

7.5CVSS7.7AI score0.00078EPSS