Lucene search
China National Vulnerability DatabaseCNVD-2022-55723HistoryJun 09, 2022 - 12:00 a.m.
Online Ordering System SQL Injection Vulnerability (CNVD-2022-55723)
2022-06-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
online ordering system
sql injection
vulnerability
version 2.3.2
validation
externally entered sql statements
sensitive database data
exploited
EPSS
0.002
Percentile
54.5%
Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/stockin/index.php?view=edit&id= The page lacks validation of externally entered SQL statements, which could be exploited to execute illegal SQL commands to steal sensitive database data.
Related
cvelist
cvelist
CVE-2022-31335
2022-05-31 14:58:02
prion
prion
Sql injection
2022-06-02 14:15:00
nvd
nvd
CVE-2022-31335
2022-06-02 14:15:56
cve
cve
CVE-2022-31335
2022-06-02 14:15:56