CVE-2025-13323: code-projects Simple Pizza Ordering System listorder.php sql injection
A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13323?
CVE-2025-13323 is considered a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-13323?
To fix CVE-2025-13323, validate and sanitize user inputs, particularly the ID argument in the /listorder.php file, to prevent SQL injection.
Who is affected by CVE-2025-13323?
CVE-2025-13323 affects users of the Simple Pizza Ordering System version 1.0 developed by code-projects.
What type of vulnerability is CVE-2025-13323?
CVE-2025-13323 is an SQL injection vulnerability, which allows attackers to manipulate database queries through unsanitized input.
Can CVE-2025-13323 be exploited remotely?
Yes, CVE-2025-13323 can be exploited remotely, enabling attackers to execute malicious SQL commands on the affected system.