CVE-2022-30797

Name of the Vulnerable Software and Affected Versions Online Ordering System version 1.0

Description The issue concerns a SQL Injection vulnerability via the "admin/vieworders.php" endpoint. This allows for potential unauthorized access and manipulation of database content.

Recommendations For Online Ordering System version 1.0, consider restricting access to the "admin/vieworders.php" endpoint until a patch is available. As a temporary workaround, avoid using user-inputted data in SQL queries to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.