Vulnerabilities > Online Ordering System Project > Online Ordering System > 2.3.2

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-02	CVE-2022-31337	SQL Injection vulnerability in Online Ordering System Project Online Ordering System 2.3.2 Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=. network low complexity online-ordering-system-project CWE-89 critical	9.8
2022-06-02	CVE-2022-31338	SQL Injection vulnerability in Online Ordering System Project Online Ordering System 2.3.2 Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=. network low complexity online-ordering-system-project CWE-89 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.