SQL Injection Vulnerability in Fast Food Ordering System by Oretnom23
CVE-2022-32330

7.2HIGH

Key Information:

Vendor

Fast Food Ordering System Project

Status
Fast Food Ordering System
Vendor
CVE Published:
14 June 2022

What is CVE-2022-32330?

The Fast Food Ordering System version 1.0 is susceptible to SQL Injection attacks through the endpoint /ffos/classes/Master.php?f=delete_menu. This flaw allows attackers to manipulate SQL queries, potentially compromising sensitive data and disrupting the normal operations of the system. As a result, effective security measures should be implemented to prevent exploitation of this vulnerability.

References

https://github.com/k0xx11/bug_report/blob/main/vendors/or...
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.