CVE-2022-36759: SQL Injection
Published Sep 2, 2022
·Updated
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?resid=.
Affected Software
2 affected components
Online Food Ordering System Project Online Food Ordering System=1.0
oretnom23 Online Food Ordering System=1.0
Event History
Sep 2, 2022
CVE Published
via MITRE·02:37 AM
Data Sourced
via MITRE·02:37 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-36759?
The severity of CVE-2022-36759 is critical with a score of 9.8.
2
What is the vulnerability associated with CVE-2022-36759?
CVE-2022-36759 is a SQL injection vulnerability in the Online Food Ordering System v1.0.
3
How can the SQL injection vulnerability in CVE-2022-36759 be exploited?
The SQL injection vulnerability in CVE-2022-36759 can be exploited via the component /dishes.php?res_id= in the Online Food Ordering System v1.0.
4
What is the CWE ID of CVE-2022-36759?
CVE-2022-36759 is associated with CWE ID 89.
5
Is there a fix available for CVE-2022-36759?
To fix CVE-2022-36759, developers should properly validate and sanitize user inputs in the affected component /dishes.php?res_id= to prevent SQL injection attacks.