Online Ordering System Project

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Online Ordering System Project records in CISA KEV

No Online Ordering System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Ordering System 21 records MEDIUM

Records

21 records

TI-2025-07080 CVE-2025-7755 · GHSA-hchv-h5ww-g5px

code-projects Online Ordering System edit_product.php unrestricted upload

MEDIUM 57

A vulnerability was found in code-projects Online Ordering System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00482 Published 2025-07-17 No fix listed CWE-284

TI-2021-09465 CVE-2021-28295 · GHSA-5g98-5v66-j62g

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through…

MEDIUM 49

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.15904 Published 2021-03-16 No fix listed CWE-89

TI-2021-09464 CVE-2021-28294 · GHSA-98m6-692f-9693

Online Ordering System 1.0 is vulnerable to arbitrary file upload through…

MEDIUM 48

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03728 Published 2021-03-16 No fix listed CWE-434

TI-2021-07471 CVE-2021-25211 · GHSA-mrc8-m4hw-pmcq

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows…

MEDIUM 46

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01874 Published 2021-07-22 No fix listed CWE-434

TI-2022-13352 CVE-2022-31357 · GHSA-jhq7-4xg6-wgfm

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via…

MEDIUM 44

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-06-17 No fix listed CWE-89

TI-2022-13351 CVE-2022-31356 · GHSA-gwq5-w3hg-334v

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via…

MEDIUM 44

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-06-17 No fix listed CWE-89

TI-2022-13350 CVE-2022-31355 · GHSA-v93r-fr6f-m4mx

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via…

MEDIUM 44

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-06-17 No fix listed CWE-89

TI-2022-13335 CVE-2022-31338 · GHSA-58gm-gfv4-f2v4

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.

MEDIUM 44

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.