High severity7.5NVD Advisory· Published Mar 16, 2021· Updated Jun 17, 2026
CVE-2021-28295
CVE-2021-28295
Description
Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:online_ordering_system_project:online_ordering_system:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:online_ordering_system_project:online_ordering_system:1.0:*:*:*:*:*:*:*
- (no CPE)range: = 1.0
- Online Ordering System/Online Ordering Systemdescription
Patches
Vulnerability mechanics
References
1- www.exploit-db.com/exploits/49618nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.