CVE-2021-28295

HIGH 7.5CVE-2021-28295 · Published 16/03/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
online ordering system online_ordering_system_project	`= 1.0`	No fix yet

Description

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.

References

exploit-db.com/exploits/49618 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free