SQL Injection in Fast Food Ordering System by Oretnom23
CVE-2022-32336

9.8CRITICAL

Key Information:

Vendor: Fast Food Ordering System Project
Status: Fast Food Ordering System
Vendor: CVE Published:; 14 June 2022

🔔 Create Fast Food Ordering System Project Vulnerability Alert

What is CVE-2022-32336?

The Fast Food Ordering System v1.0 is susceptible to SQL Injection attacks through the vulnerable endpoint /ffos/admin/menus/view_menu.php?id=. This security flaw allows an attacker to manipulate SQL queries, potentially leading to unauthorized data access, data modification, or even data deletion. Organizations using this system are urged to assess their security posture and apply patches or mitigations to safeguard against potential exploitation.

References

https://github.com/k0xx11/bug_report/blob/main/vendors/or...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 14, 2022
Vulnerability Reserved
Jun 5, 2022

CVE-2022-32336 Data

JSON