Skip to content
OpenAdvisories

Vendor

Order Up

1 known vulnerabilities.

Products

Online Ordering System 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-24494

    SQL injection vulnerability in Order Up Online Ordering System

    SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.

    Order Up Online Ordering System