SQL Injection Vulnerability in Janobe Online Ordering System
CVE-2022-31328

9.8CRITICAL

Key Information:

Vendor: Online Ordering System Project
Status: Online Ordering System
Vendor: CVE Published:; 2 June 2022

🔔 Create Online Ordering System Project Vulnerability Alert

What is CVE-2022-31328?

The Janobe Online Ordering System version 2.3.2 is susceptible to a SQL Injection vulnerability that can be exploited through a manipulated request to /ordering/admin/products/index.php?view=edit&id=. This can allow attackers to execute arbitrary SQL commands, potentially compromising the database integrity and exposing sensitive information. It is essential for users of this system to implement appropriate security measures to mitigate the risk and safeguard their data.

References

https://github.com/k0xx11/bug_report/blob/main/vendors/ja...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 2, 2022
Vulnerability Reserved
May 23, 2022

CVE-2022-31328 Data

JSON