Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-24494

SQL injection vulnerability in Order Up Online Ordering System

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
spartans-security

Description

SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Order Up Online Ordering System

Default version status: unaffected

  • 1.0affected

References