CVE-2022-42990: ORETNOM23 Food Ordering Management System

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all-orders.php?status=Cancelled%20by%20Customer.

Affected products

• ORETNOM23 Food Ordering Management System: version 1.0 only

Published 2022-11-07. Last modified 2026-06-17.