← All advisories

High severity7.5NVD Advisory· Published Aug 31, 2022· Updated Jun 17, 2026

CVE-2022-36581

CVE-2022-36581

Description

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.

Affected products

3

Online Ordering System Project/Online Ordering System2 versions
cpe:2.3:a:online_ordering_system_project:online_ordering_system:2.3.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:online_ordering_system_project:online_ordering_system:2.3.2:*:*:*:*:*:*:*
- (no CPE)range: =2.3.2
Online Ordering System/Online Ordering Systemdescription

Patches

Vulnerability mechanics

References

1

github.com/zerrr0/Zerrr0_Vulnerability/blob/main/Online-Ordering-System/SQL-Injection-Vulnerability.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.