CVE-2025-12930: SourceCodester Food Ordering System view-ticket.php sql injection
A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12930?
CVE-2025-12930 is classified as a critical severity SQL injection vulnerability.
How do I fix CVE-2025-12930?
To fix CVE-2025-12930, sanitize and validate the input parameters in the /view-ticket.php file to prevent SQL injection.
Can CVE-2025-12930 be exploited remotely?
Yes, CVE-2025-12930 can be exploited remotely, allowing attackers to manipulate the ID parameter.
Which component of the application is affected by CVE-2025-12930?
CVE-2025-12930 affects the /view-ticket.php file in the SourceCodester Food Ordering System.
What type of vulnerability is CVE-2025-12930?
CVE-2025-12930 is an SQL injection vulnerability that allows unauthorized access to the database.