Lucene search
China National Vulnerability DatabaseCNVD-2022-55725HistoryJun 09, 2022 - 12:00 a.m.
Online Ordering System SQL注入漏洞
2022-06-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
23
online ordering system
sql injection
version 2.3.2
multi-store ordering
small business
sql commands
sensitive data
database
EPSS
0.002
Percentile
54.5%
Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/user/index.php?view=edit&id=page The lack of validation of externally entered SQL statements could be exploited to execute illegal SQL commands to steal sensitive database data.
Related
nvd
nvd
CVE-2022-31338
2022-06-02 14:15:56
prion
prion
Sql injection
2022-06-02 14:15:00
cvelist
cvelist
CVE-2022-31338
2022-05-31 14:51:14
cve
cve
CVE-2022-31338
2022-06-02 14:15:56