CVE-2021-28295

2021-03-1619:54:31

mitre

www.cve.org

online ordering system; sql injection; database disclosure

AI Score

Confidence

High

EPSS

0.002

Percentile

57.0%

JSON

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.

References

www.exploit-db.com/exploits/49618