CVE-2022-31355: SQL Injection
Published Jun 17, 2022
·Updated
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=.
Affected Software
1 affected component
Online Ordering System Project Online Ordering System=2.3.2
Event History
Jun 17, 2022
CVE Published
via MITRE·01:35 PM
Data Sourced
via MITRE·01:35 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-31355?
The severity of CVE-2022-31355 is classified as medium due to the potential for unauthorized database access through SQL injection.
2
How do I fix CVE-2022-31355?
To fix CVE-2022-31355, validate and sanitize user inputs in the SQL queries to prevent SQL injection.
3
What systems are affected by CVE-2022-31355?
CVE-2022-31355 affects Online Ordering System version 2.3.2.
4
What kind of attack does CVE-2022-31355 enable?
CVE-2022-31355 enables attackers to perform SQL injection attacks, potentially exposing sensitive data.
5
Is CVE-2022-31355 easy to exploit?
Yes, CVE-2022-31355 can be easily exploited by sending crafted requests to the vulnerable endpoint.