SQL Injection Vulnerability in Fast Food Ordering System by Oretnom23
CVE-2022-32335

7.2HIGH

Key Information:

Vendor: Fast Food Ordering System Project
Status: Fast Food Ordering System
Vendor: CVE Published:; 14 June 2022

🔔 Create Fast Food Ordering System Project Vulnerability Alert

What is CVE-2022-32335?

The Fast Food Ordering System version 1.0 is susceptible to a SQL Injection attack through the 'manage_menu.php' endpoint. An attacker can exploit this vulnerability by manipulating the 'id' parameter in HTTP requests to execute arbitrary SQL commands. This compromise can lead to unauthorized access and potential data leakage, making it crucial for users and developers to apply appropriate security measures and patch their systems accordingly.

References

https://github.com/k0xx11/bug_report/blob/main/vendors/or...

x_refsource_MISC

CVSS V3.1

Score:

7.2

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 14, 2022
Vulnerability Reserved
Jun 5, 2022

CVE-2022-32335 Data

JSON