Approved changes feed: RSS · Atom

cpe:2.3:a:online_ordering_system_project:online_ordering_system:2.3.2:*:*:*:*:*:*:*

part: a version: 2.3.2 update: *

VendorOnline Ordering System Project (3b490d04-4a37-56af-93c1-1dd4a75e2081)
ProductOnline Ordering System (7a7028e3-388e-578e-ae8b-fdad9bbfa43d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36581 vulnerable 2026-06-08 05:46:07.575915 Details available
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.
Published: 2022-08-31T19:44:16.000Z
Updated: 2024-08-03T10:07:34.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36580 vulnerable 2026-06-08 05:46:07.575454 Details available
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file.
Published: 2022-08-31T19:44:14.000Z
Updated: 2024-08-03T10:07:34.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31357 vulnerable 2026-06-08 05:43:40.735851 Details available
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.
Published: 2022-06-17T13:29:55.000Z
Updated: 2024-08-03T07:19:06.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31356 vulnerable 2026-06-08 05:43:40.735579 Details available
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.
Published: 2022-06-17T13:29:55.000Z
Updated: 2024-08-03T07:19:05.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31355 vulnerable 2026-06-08 05:43:40.735215 Details available
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=.
Published: 2022-06-17T13:35:47.000Z
Updated: 2024-08-03T07:19:05.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31338 vulnerable 2026-06-08 05:43:40.725496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31337 vulnerable 2026-06-08 05:43:40.725234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31336 vulnerable 2026-06-08 05:43:40.724873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31335 vulnerable 2026-06-08 05:43:40.724491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31329 vulnerable 2026-06-08 05:43:40.724211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31328 vulnerable 2026-06-08 05:43:40.723906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31327 vulnerable 2026-06-08 05:43:40.723516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.