Simple Pizza Ordering System EUVD-2025-18851

CVSS 7.3 with AV:N/AC:L/PR:N/UI:N/S:U indicates high exploitability: network-accessible, no special conditions required, no privileges needed, and no user interaction—all factors maximizing real-world attack probability. The public disclosure and available POC significantly elevate exploitation likelihood. Compared to low-complexity, unauthenticated SQL injection vulnerabilities historically, this ranks in the top percentile for active exploitation risk. The CVSS impact metrics (C:L/I:L/A:L - Confidentiality, Integrity, Availability all affected) indicate the attacker gains read/write/delete access to the database. However, the CVSS score of 7.3 (rather than 9.0+) suggests the vulnerability may lack full data exfiltration capability or the impact scope is limited to the application's database rather than system-wide compromise. This is a genuine priority: public POC + unauthenticated network access + SQL injection = high likelihood of rapid weaponization and deployment in automated scanning tools. Organizations running this product should treat this as critical despite the 7.3 score.

An attacker discovers a Simple Pizza Ordering System 1.0 instance via search engine dorking or network scanning. They craft an HTTP request to /edituser-exec.php?userid=1' OR '1'='1 (or a time-based blind SQL injection payload like userid=1' AND SLEEP(5)--). Since PR:N (no privileges required) and UI:N (no user interaction), the request executes immediately against the backend database. The attacker extracts user credentials, payment information, and order history via UNION-based SQL injection, or modifies admin accounts to establish persistence. A more destructive variant drops tables or exfiltrates the entire customer database. Automated tools scanning the internet for this vulnerability could rapidly compromise hundreds of vulnerable instances without any defensive alerting.