Online Ordering System

3 CVEs product

Monthly

CVE-2025-14251 HIGH POC This Week

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

SQLi Online Ordering System
NVD GitHub VulDB
CVSS 3.1
7.3
EPSS
0.0%
CVE-2025-14250 HIGH POC This Week

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /user_contact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.

PHP SQLi Online Ordering System
NVD GitHub VulDB
CVSS 3.1
7.3
EPSS
0.0%
CVE-2025-14249 HIGH POC This Week

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /user_school.php. The manipulation of the argument product_id results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited.

PHP SQLi Online Ordering System
NVD GitHub VulDB
CVSS 3.1
7.3
EPSS
0.0%
CVE-2025-14251
EPSS 0% CVSS 7.3
HIGH POC This Week

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

SQLi Online Ordering System
NVD GitHub VulDB
CVE-2025-14250
EPSS 0% CVSS 7.3
HIGH POC This Week

A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /user_contact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.

PHP SQLi Online Ordering System
NVD GitHub VulDB
CVE-2025-14249
EPSS 0% CVSS 7.3
HIGH POC This Week

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /user_school.php. The manipulation of the argument product_id results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited.

PHP SQLi Online Ordering System
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy