SQL Injection Vulnerability in Fast Food Ordering System by Oretnom23
CVE-2022-32334

7.2HIGH

Key Information:

Vendor

Fast Food Ordering System Project

Status
Fast Food Ordering System
Vendor
CVE Published:
14 June 2022

What is CVE-2022-32334?

The Fast Food Ordering System version 1.0 contains an SQL Injection vulnerability through the 'manage_category.php' endpoint. This flaw allows attackers to manipulate backend database queries by injecting malicious SQL code via the 'id' parameter. Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, potential data leakage, and manipulation of the database content. It is crucial for users of this system to apply necessary patches and follow security best practices to mitigate the risk.

References

https://github.com/k0xx11/bug_report/blob/main/vendors/or...
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.