← All advisories

Critical severity9.8NVD Advisory· Published Jun 17, 2022· Updated Jun 17, 2026

CVE-2022-31357

CVE-2022-31357

Description

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.

Affected products

3

Online Ordering System Project/Online Ordering System
cpe:2.3:a:online_ordering_system_project:online_ordering_system:2.3.2:*:*:*:*:*:*:*
Online Ordering System/Online Ordering Systemdescription
Janobe/Bakeshop Online Ordering Systemllm-fuzzy
Range: = 2.3.2

Patches

Vulnerability mechanics

References

1

github.com/k0xx11/bug_report/blob/main/vendors/janobe/online-ordering-system/SQLi-3.mdnvdExploitTool Signature

News mentions

0

No linked articles in our index yet.