CVE-2025-13201: code-projects Simple Cafe Ordering System login.php sql injection

Published Nov 15, 2025

Updated

A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.

Affected Software

2 affected components

Code-projects Simple Cafe Ordering System

Fabian Simple Cafe Ordering System=1.0

Event History

Nov 15, 2025

CVE Published

via MITRE·04:02 PM

Data Sourced

via MITRE·04:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-13201?

CVE-2025-13201 has been classified with a severity rating that indicates a significant risk of SQL injection.

How do I fix CVE-2025-13201?

To fix CVE-2025-13201, sanitize user inputs in the login functionality to prevent SQL injection attacks.

Which software is affected by CVE-2025-13201?

CVE-2025-13201 affects the Simple Cafe Ordering System version 1.0.

What type of vulnerability is CVE-2025-13201?

CVE-2025-13201 is identified as an SQL injection vulnerability, specifically in the login.php file.

Can CVE-2025-13201 be exploited remotely?

Yes, CVE-2025-13201 can be exploited remotely by manipulating the Username argument.