Simple Pizza Ordering System CVE-2025-6356

This vulnerability presents significant real-world risk despite the CVSS 3.1 score of 7.3 (High). The CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L indicates network accessibility with no authentication required and low attack complexity—factors that dramatically increase real-world exploitability. The public disclosure of exploit code and confirmed proof-of-concept significantly elevates practical risk. SQL injection vulnerabilities typically score higher on EPSS probability due to their ease of exploitation and the abundance of automated scanners and exploit tools. The unauthenticated, network-accessible nature (AV:N, PR:N) combined with the disclosed exploit makes this a priority for immediate remediation. This is not a false-positive high-CVSS issue; the attack vector and public availability of working exploits make this genuinely urgent for affected deployments.

An attacker visits the vulnerable application and crafts a malicious HTTP request to /addmem.php with a SQL injection payload in a user-controllable parameter (e.g., ?name=admin' OR '1'='1). Because the application lacks input validation and directly embeds this parameter into a SQL query (e.g., INSERT INTO members (name) VALUES ('admin' OR '1'='1')), the injected SQL syntax is executed by the database. The attacker can then extract sensitive data such as user credentials, payment information, or customer records; modify database contents to escalate privileges or tamper with orders; or in severe cases, delete entire database tables. Since the vulnerability requires no authentication (PR:N) and no user interaction (UI:N), an attacker can launch this attack completely remotely and automatically. With public exploit code available, attackers using automated scanning tools can rapidly identify and compromise vulnerable instances of this application across the internet.