CVE-2025-11600: code-projects Simple Food Ordering System editcategory.php sql injection

Published Oct 11, 2025

Updated

A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file editcategory.php. Such manipulation of the argument cname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

Code-projects Simple Food Ordering System

Fabian Simple Food Ordering System=1.0

Event History

Oct 11, 2025

CVE Published

via MITRE·12:32 PM

Data Sourced

via MITRE·12:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11600?

CVE-2025-11600 is classified as a high-severity vulnerability due to its potential for remote SQL injection.

How do I fix CVE-2025-11600?

To fix CVE-2025-11600, sanitize and validate all user inputs, particularly the 'cname' parameter in the editcategory.php file.

What type of vulnerability is CVE-2025-11600?

CVE-2025-11600 is an SQL injection vulnerability that can be exploited remotely.

Which software is affected by CVE-2025-11600?

CVE-2025-11600 affects version 1.0 of the Simple Food Ordering System developed by Code-projects.

Can CVE-2025-11600 be exploited by an attacker?

Yes, CVE-2025-11600 can be exploited remotely by attackers to execute unauthorized SQL commands.