Lucene search
China National Vulnerability DatabaseCNVD-2022-55712HistoryJun 21, 2022 - 12:00 a.m.
Online Ordering System SQL Injection Vulnerability (CNVD-2022-55712)
2022-06-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
sql injection
online ordering system
version v2.3.2
validation
external input
exploit
sensitive data
database
EPSS
0.002
Percentile
54.5%
Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/inventory/index.php?view=edit & id=Lack of validation of external input SQL statements can be exploited to execute illegal SQL commands to steal sensitive database data.
Related
cve
cve
CVE-2022-31357
2022-06-17 14:15:08
nvd
nvd
CVE-2022-31357
2022-06-17 14:15:08
cvelist
cvelist
CVE-2022-31357
2022-06-17 13:29:55
prion
prion
Sql injection
2022-06-17 14:15:00