Online Ordering System Project vulnerabilities
21 vulnerabilities
Known vulnerabilities in Online Ordering System Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Online Ordering System21 vulnerabilities
CVE-2021-25211online_ordering_system_projectonline_ordering_system
EPSS score1.87%
Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php.CVE-2021-28295online_ordering_system_projectonline_ordering_systemEPSS score15.90%
Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.CVE-2021-28294online_ordering_system_projectonline_ordering_systemEPSS score3.73%
Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).CVE-2025-7755code-projectsonline ordering system+1EPSS score0.48%
A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/edit_product.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2022-31336online_ordering_system_projectonline_ordering_systemEPSS score1.14%
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php.CVE-2022-31329online_ordering_system_projectonline_ordering_systemEPSS score1.14%
Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php.CVE-2022-31328online_ordering_system_projectonline_ordering_systemEPSS score1.14%
Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=.CVE-2022-31327online_ordering_system_projectonline_ordering_systemEPSS score1.16%
Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=.CVE-2022-31357online_ordering_system_projectonline_ordering_systemEPSS score1.08%
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.CVE-2022-31356online_ordering_system_projectonline_ordering_systemEPSS score1.08%
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.CVE-2022-31335online_ordering_system_projectonline_ordering_systemEPSS score1.14%
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=.CVE-2022-31337online_ordering_system_projectonline_ordering_systemEPSS score1.14%
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=.CVE-2022-31338online_ordering_system_projectonline_ordering_systemEPSS score1.14%
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.CVE-2022-31355online_ordering_system_projectonline_ordering_systemEPSS score1.08%
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=.CVE-2022-36581online_ordering_system_projectonline_ordering_systemEPSS score0.93%
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.CVE-2022-36580online_ordering_system_projectonline_ordering_systemEPSS score1.41%
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file.CVE-2022-30798online_ordering_system_projectonline_ordering_systemEPSS score1.02%
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.CVE-2022-30797online_ordering_system_projectonline_ordering_systemEPSS score1.16%
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.CVE-2022-30794online_ordering_system_projectonline_ordering_systemEPSS score0.87%
Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php.CVE-2022-30799online_ordering_system_projectonline_ordering_systemEPSS score1.02%
Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.