TI-2025-07080 CVE-2025-7755 · GHSA-hchv-h5ww-g5px
code-projects Online Ordering System edit_product.php unrestricted upload
Priority MEDIUM 57
A vulnerability was found in code-projects Online Ordering System 1.0.
Vulnerabilities
21 records
TI-2022-16890 CVE-2022-36581 · GHSA-qxgm-74qr-rjwg
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via…
Priority LOW 35
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.
TI-2022-16889 CVE-2022-36580 · GHSA-99vh-x4h4-c293
An arbitrary file upload vulnerability in the component…
Priority LOW 35
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file.
TI-2022-13350 CVE-2022-31355 · GHSA-v93r-fr6f-m4mx
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via…
Priority MEDIUM 44
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=.
TI-2022-13352 CVE-2022-31357 · GHSA-jhq7-4xg6-wgfm
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via…
Priority MEDIUM 44
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.
TI-2022-13351 CVE-2022-31356 · GHSA-gwq5-w3hg-334v
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via…
Priority MEDIUM 44
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.
TI-2022-13331 CVE-2022-31329 · GHSA-8mvh-j43p-f454
Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php.
Priority MEDIUM 44
Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php.
TI-2022-13330 CVE-2022-31328 · GHSA-xw7j-cq8f-4pjw
Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=.
Priority MEDIUM 44
Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=.
TI-2022-13329 CVE-2022-31327 · GHSA-83m2-jh9f-h6m8
Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=.
Priority MEDIUM 44
Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=.
TI-2022-12926 CVE-2022-30799 · GHSA-wjfv-rqjm-x4gr
Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.
Priority LOW 34
Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.
TI-2022-12925 CVE-2022-30798 · GHSA-8xfm-j247-mx67
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.
Priority LOW 34
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.
TI-2022-12924 CVE-2022-30797 · GHSA-6g77-x33x-4xjx
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.
Priority MEDIUM 44
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.
TI-2022-12923 CVE-2022-30795 · GHSA-345f-22mg-6jxg
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php.
Priority LOW 34
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php.
TI-2022-12922 CVE-2022-30794 · GHSA-9q23-ppgw-74vg
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php.
Priority LOW 33
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php.
TI-2022-13332 CVE-2022-31335 · GHSA-xfxv-r6vq-hqq8
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=.
Priority MEDIUM 44
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=.
TI-2022-13333 CVE-2022-31336 · GHSA-6qfw-mqxw-44rm
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php.
Priority MEDIUM 44
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php.
TI-2022-13334 CVE-2022-31337 · GHSA-hx38-2mf8-33hg
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=.
Priority MEDIUM 44
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=.
TI-2022-13335 CVE-2022-31338 · GHSA-58gm-gfv4-f2v4
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.
Priority MEDIUM 44
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.
TI-2021-07471 CVE-2021-25211 · GHSA-mrc8-m4hw-pmcq
Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows…
Priority MEDIUM 46
Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php.
TI-2021-09465 CVE-2021-28295 · GHSA-5g98-5v66-j62g
Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through…
Priority MEDIUM 49
Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.
TI-2021-09464 CVE-2021-28294 · GHSA-98m6-692f-9693
Online Ordering System 1.0 is vulnerable to arbitrary file upload through…
Priority MEDIUM 48
Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).