CVE-2022-29650: SQL Injection
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-29650?
CVE-2022-29650 is a SQL injection vulnerability found in Online Food Ordering System v1.0.
How does CVE-2022-29650 affect Online Food Ordering System v1.0?
CVE-2022-29650 allows an attacker to execute arbitrary SQL commands on the system via the Search parameter in /online-food-order/food-search.php.
Is Online Food Ordering System v1.0 the only affected version?
Yes, only version 1.0 of Online Food Ordering System is affected by CVE-2022-29650.
What is the severity of CVE-2022-29650?
CVE-2022-29650 has a severity rating of critical, with a score of 9.8.
How can I fix the SQL injection vulnerability in Online Food Ordering System v1.0?
To fix the SQL injection vulnerability in Online Food Ordering System v1.0, it is recommended to sanitize and validate user input, and use prepared statements or parameterized queries for database interactions.