CVE-2022-30798

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-307997.2Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.CVE-2022-30807.5By sending specific queries to the resolver, an attacker can cause named to crash.CVE-2022-308046.5elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.CVE-2022-308089.8elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.CVE-2022-308099.8elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.CVE-2022-308109.8elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.CVE-2022-308139.8elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.CVE-2022-308149.8elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.CVE-2022-308159.8elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=CVE-2022-308169.8elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.CVE-2022-308179.8Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php.CVE-2022-308187.2Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blog_events_edit.php?id=31.
CVE-2022-30798: High severity, CVSS 7.2 | Vulnix