CVE-2025-12931: SourceCodester Food Ordering System edit-orders.php sql injection
A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12931?
CVE-2025-12931 is classified as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-12931?
To fix CVE-2025-12931, ensure that proper validation and sanitization of user input is implemented in the /routers/edit-orders.php file.
What software is affected by CVE-2025-12931?
CVE-2025-12931 affects SourceCodester Food Ordering System version 1.0.
What type of vulnerability is CVE-2025-12931?
CVE-2025-12931 is an SQL injection vulnerability caused by improper handling of the ID argument.
Can CVE-2025-12931 be exploited remotely?
Yes, CVE-2025-12931 can be exploited remotely, allowing attackers to manipulate the database.