TI-2026-19744 CVE-2026-24494 · GHSA-9rv8-797j-7r85
SQL injection vulnerability in Order Up Online Ordering System
Priority MEDIUM 49
SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id par…