Description
SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Order Up | Online Ordering System | 1.0 | — |