How to fix CVE-2025-6123?

Within 24 hours: Identify all systems running Restaurant Order System 1.0 and isolate affected payment processing servers from production networks if possible. Within 7 days: Implement Web Application Firewall (WAF) rules to block SQL injection patterns on the /payment.php endpoint and disable the tabidNoti parameter if operationally feasible. Within 30 days: Migrate to a patched version, replace the vulnerable application with a secure alternative, or execute a full remediation after vendor patch release; conduct forensic analysis for evidence of exploitation.

Is PHP affected by CVE-2025-6123?

A critical SQL injection vulnerability in the Restaurant Order System's payment processing module allows remote attackers to compromise customer data and financial information without authentication.

CVE-2025-6123

EUVD-2025-18411 HIGH

2025-06-16 [email protected]

PHP SQLi Restaurant Order System

7.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 14, 2026 - 21:59 vuln.today

EUVD ID Assigned

Mar 14, 2026 - 21:59 euvd

EUVD-2025-18411

PoC Detected

Jul 07, 2025 - 18:49 vuln.today

Public exploit code

CVE Published

Jun 16, 2025 - 13:15 nvd

HIGH 7.3

DescriptionNVD

A vulnerability has been found in code-projects Restaurant Order System 1.0 and classified as critical. This vulnerability affects unknown code of the file /payment.php. The manipulation of the argument tabidNoti leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

A SQL injection vulnerability in A vulnerability (CVSS 7.3). Risk factors: public PoC available.

Technical ContextAI

CWE-74 (Injection). CVSS 7.3 indicates high severity. Affects A vulnerability.

RemediationAI

Monitor vendor channels for patch availability. Implement input validation and WAF rules as interim mitigation.

CVE-2025-6123 vulnerability details – vuln.today

Back