CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 31/08/2022 |
| CVE-2022-31357 | 严重9.8 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=. | 17/06/2022 |
| CVE-2022-31356 | 严重9.8 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=. | 17/06/2022 |
| CVE-2022-31355 | 严重9.8 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=. | 17/06/2022 |
| CVE-2022-31338 | 严重9.8 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=. | 02/06/2022 |
| CVE-2022-31337 | 严重9.8 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=. | 02/06/2022 |
| CVE-2022-31336 | 严重9.8 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php. | 02/06/2022 |
| CVE-2022-31335 | 严重9.8 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=. | 02/06/2022 |
| CVE-2022-31329 | 严重9.8 | Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php. | 02/06/2022 |
| CVE-2022-31328 | 严重9.8 | Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=. | 02/06/2022 |
| CVE-2022-31327 | 严重9.8 | Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=. | 02/06/2022 |
| CVE-2022-30799 | 高危7.2 | Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php. | 02/06/2022 |
| CVE-2022-30798 | 高危7.2 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php. | 02/06/2022 |
| CVE-2022-30797 | 严重9.8 | Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php. | 02/06/2022 |
| CVE-2022-30795 | 高危7.2 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php. | 02/06/2022 |
| CVE-2022-30794 | 高危7.2 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php. | 02/06/2022 |
| CVE-2021-25211 | 严重9.8 | Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php. | 22/07/2021 |
| CVE-2021-28295 | 高危7.5 | Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure. | 16/03/2021 |