CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 31/08/2022 |
| CVE-2022-31357 | CRITICAL9.8 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=. | 17/06/2022 |
| CVE-2022-31356 | CRITICAL9.8 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=. | 17/06/2022 |
| CVE-2022-31355 | CRITICAL9.8 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=. | 17/06/2022 |
| CVE-2022-31338 | CRITICAL9.8 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=. | 02/06/2022 |
| CVE-2022-31337 | CRITICAL9.8 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=. | 02/06/2022 |
| CVE-2022-31336 | CRITICAL9.8 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php. | 02/06/2022 |
| CVE-2022-31335 | CRITICAL9.8 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=. | 02/06/2022 |
| CVE-2022-31329 | CRITICAL9.8 | Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php. | 02/06/2022 |
| CVE-2022-31328 | CRITICAL9.8 | Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=. | 02/06/2022 |
| CVE-2022-31327 | CRITICAL9.8 | Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=. | 02/06/2022 |
| CVE-2022-30799 | HIGH7.2 | Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php. | 02/06/2022 |
| CVE-2022-30798 | HIGH7.2 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php. | 02/06/2022 |
| CVE-2022-30797 | CRITICAL9.8 | Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php. | 02/06/2022 |
| CVE-2022-30795 | HIGH7.2 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php. | 02/06/2022 |
| CVE-2022-30794 | HIGH7.2 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php. | 02/06/2022 |
| CVE-2021-25211 | CRITICAL9.8 | Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php. | 22/07/2021 |
| CVE-2021-28295 | HIGH7.5 | Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure. | 16/03/2021 |