Bakeshop Online Ordering System
by Janobe
CVEs (13)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-9660 | Hig | 0.47 | 7.3 | 0.00 | Aug 29, 2025 | A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out… | ||
| CVE-2024-6065 | 0.00 | — | 0.01 | Jun 17, 2024 | A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument user_email leads to sql injection. The attack may be initiated remotely.… | |||
| CVE-2024-5745 | 0.00 | — | 0.01 | Jun 7, 2024 | A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/product/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It… | |||
| CVE-2024-5636 | 0.00 | — | 0.01 | Jun 5, 2024 | A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The attack may be… | |||
| CVE-2024-5635 | 0.00 | — | 0.01 | Jun 4, 2024 | A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument txtsearch leads to sql injection. The attack can be… | |||
| CVE-2022-31355 | 0.00 | — | 0.01 | Jun 17, 2022 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=. | |||
| CVE-2022-31356 | 0.00 | — | 0.01 | Jun 17, 2022 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=. | |||
| CVE-2022-31357 | 0.00 | — | 0.01 | Jun 17, 2022 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=. | |||
| CVE-2022-31329 | 0.00 | — | 0.01 | May 31, 2022 | Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php. | |||
| CVE-2022-31328 | 0.00 | — | 0.01 | May 31, 2022 | Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=. | |||
| CVE-2022-31327 | 0.00 | — | 0.01 | May 31, 2022 | Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=. | |||
| CVE-2022-31337 | 0.00 | — | 0.01 | May 31, 2022 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=. | |||
| CVE-2022-31338 | 0.00 | — | 0.01 | May 31, 2022 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=. |
- risk 0.47cvss 7.3epss 0.00
A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out…
- CVE-2024-6065Jun 17, 2024risk 0.00cvss —epss 0.01
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument user_email leads to sql injection. The attack may be initiated remotely.…
- CVE-2024-5745Jun 7, 2024risk 0.00cvss —epss 0.01
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/product/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It…
- CVE-2024-5636Jun 5, 2024risk 0.00cvss —epss 0.01
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The attack may be…
- CVE-2024-5635Jun 4, 2024risk 0.00cvss —epss 0.01
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument txtsearch leads to sql injection. The attack can be…
- CVE-2022-31355Jun 17, 2022risk 0.00cvss —epss 0.01
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=.
- CVE-2022-31356Jun 17, 2022risk 0.00cvss —epss 0.01
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.
- CVE-2022-31357Jun 17, 2022risk 0.00cvss —epss 0.01
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.
- CVE-2022-31329May 31, 2022risk 0.00cvss —epss 0.01
Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php.
- CVE-2022-31328May 31, 2022risk 0.00cvss —epss 0.01
Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=.
- CVE-2022-31327May 31, 2022risk 0.00cvss —epss 0.01
Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=.
- CVE-2022-31337May 31, 2022risk 0.00cvss —epss 0.01
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=.
- CVE-2022-31338May 31, 2022risk 0.00cvss —epss 0.01
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.