CVE-2025-11612: code-projects Simple Food Ordering System addproduct.php sql injection
A vulnerability has been found in code-projects Simple Food Ordering System 1.0. This impacts an unknown function of the file /addproduct.php. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11612?
CVE-2025-11612 is classified as a high severity vulnerability due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-11612?
To fix CVE-2025-11612, sanitize and validate user input in the /addproduct.php file to prevent SQL injection.
What impact does CVE-2025-11612 have on my system?
CVE-2025-11612 can allow attackers to manipulate your database via SQL injection, potentially leading to data exposure or data loss.
Can CVE-2025-11612 be exploited remotely?
Yes, CVE-2025-11612 can be exploited remotely, allowing attackers to execute harmful SQL queries without physical access to the system.
Which version of Simple Food Ordering System is affected by CVE-2025-11612?
CVE-2025-11612 affects version 1.0 of the Simple Food Ordering System by code-projects.