cbcvebase.

Order Up Online Ordering System vulnerabilities

1 known vulnerability affecting order_up/online_ordering_system.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-24494P2CRITICALCVSS 9.8v1.02026-02-23
CVE-2026-24494 [CRITICAL] CWE-89 CVE-2026-24494: SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ord SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.
nvd
Order Up Online Ordering System vulnerabilities | cvebase