high7.5
CVE-2021-28295
Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information…
Impact
Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Ordering System Project | Online Ordering System | Version 1.0 |