Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2963▼ 120 respecto a la semana anterior
Críticas / altas1404▲ 47 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
44 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 17/6/2022 | 17/6/2026 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 17/6/2022 | 17/6/2026 | Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=. | |
| Modificada | Alta (7.2) | 1.0% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php. | |
| Modificada | Alta (7.2) | 1.0% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php. | |
| Modificada | Crítica (9.8) | 1.1% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php. | |
| Modificada | Alta (7.2) | 1.0% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php. | |
| Modificada | Alta (7.2) | 0.86% | — | Online Ordering System Project Online Ordering System | 2/6/2022 | 17/6/2026 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php. | |
| Modificada | Media (5.4) | 0.58% | — | Gadget Works Online Ordering System Project Gadget Works Online Ordering System | 28/1/2022 | 17/6/2026 | A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php. | |
| Modificada | Crítica (9.8) | 1.9% | — | Online Ordering System Project Online Ordering System | 22/7/2021 | 17/6/2026 | Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php. | |
| Modificada | Alta (7.5) | 16% | — | Online Ordering System Project Online Ordering System | 16/3/2021 | 17/6/2026 | Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure. | |
| Modificada | Crítica (9.8) | 3.7% | — | Online Ordering System Project Online Ordering System | 16/3/2021 | 17/6/2026 | Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE). | |
| Modificada | Media (4.8) | 0.71% | — | Bakeshop Online Ordering System Project Bakeshop Online Ordering System | 26/1/2021 | 17/6/2026 | Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to inject an arbitrary web script or HTML in admin dashboard - "Categories". |