CVE-2025-13203: code-projects Simple Cafe Ordering System addmem.php sql injection

Published Nov 15, 2025

Updated

A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code of the file /addmem.php. Executing manipulation of the argument studentnum can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Code-projects Simple Cafe Ordering System

Fabian Simple Cafe Ordering System=1.0

Event History

Nov 15, 2025

CVE Published

via MITRE·05:32 PM

Data Sourced

via MITRE·05:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-13203?

CVE-2025-13203 is classified as a high severity vulnerability due to the potential for SQL injection.

How do I fix CVE-2025-13203?

To fix CVE-2025-13203, input validation and parameterized queries should be implemented in the /addmem.php file.

What is the exploit method for CVE-2025-13203?

CVE-2025-13203 can be exploited by manipulating the studentnum argument in a remote attack.

Which software is affected by CVE-2025-13203?

CVE-2025-13203 affects code-projects Simple Cafe Ordering System version 1.0.

Can CVE-2025-13203 be exploited remotely?

Yes, CVE-2025-13203 can be exploited remotely due to its nature.