CVE-2022-3012

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-207422 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
oretnom23	Fast Food Ordering System	n/a

References

https://github.com/0x14dli/ffos-SQL-injection-vulnerability-existsExploit, Third Party Advisory
https://vuldb.com/?id.207422Third Party Advisory
https://github.com/0x14dli/ffos-SQL-injection-vulnerability-existsExploit, Third Party Advisory
https://vuldb.com/?id.207422Third Party Advisory

Timeline

Published: Aug 27, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-301206.1XSS in /dashboard/blocks/stacks/view_details/ - old browsers only. When using an older browser with built-in XSS protection disabled, insuff CVE-2022-301216.7The “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables CVE-2022-301227.5A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.CVE-2022-3012310.0A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint a CVE-2022-301246.8An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a m CVE-2022-301265.5In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of ser CVE-2022-301278.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-301288.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-301298.8Visual Studio Code Remote Code Execution Vulnerability CVE-2022-30139.8A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the fil CVE-2022-301303.3.NET Framework Denial of Service Vulnerability CVE-2022-301317.8Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability