CVE-2025-12315: code-projects Food Ordering System menu.php sql injection
A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12315?
CVE-2025-12315 is considered a critical vulnerability due to its potential to allow SQL injection attacks.
How do I fix CVE-2025-12315?
To fix CVE-2025-12315, validate and sanitize the input from the itemPrice parameter in the /admin/menu.php file to prevent SQL injection.
What systems are affected by CVE-2025-12315?
CVE-2025-12315 affects Code-projects Food Ordering System version 1.0.
Can CVE-2025-12315 be exploited remotely?
Yes, CVE-2025-12315 can be exploited remotely, making it a significant security risk.
What kind of attack can be performed using CVE-2025-12315?
CVE-2025-12315 can lead to SQL injection attacks due to improper handling of the itemPrice argument.