Vulnerabilities > Online Ordering System Project > Online Ordering System > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-06-02 CVE-2022-30794 SQL Injection vulnerability in Online Ordering System Project Online Ordering System 1.0
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php.
network
low complexity
online-ordering-system-project CWE-89
6.5
2022-06-02 CVE-2022-30795 SQL Injection vulnerability in Online Ordering System Project Online Ordering System 1.0
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php.
network
low complexity
online-ordering-system-project CWE-89
6.5
2022-06-02 CVE-2022-30798 SQL Injection vulnerability in Online Ordering System Project Online Ordering System 1.0
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.
network
low complexity
online-ordering-system-project CWE-89
6.5
2022-06-02 CVE-2022-30799 SQL Injection vulnerability in Online Ordering System Project Online Ordering System 1.0
Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.
network
low complexity
online-ordering-system-project CWE-89
6.5
2021-03-16 CVE-2021-28295 SQL Injection vulnerability in Online Ordering System Project Online Ordering System 1.0
Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.
network
low complexity
online-ordering-system-project CWE-89
5.0