CVE-2025-14652: itsourcecode Online Cake Ordering System admindetail.php sql injection
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14652?
CVE-2025-14652 is categorized as a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-14652?
To fix CVE-2025-14652, sanitize and validate all inputs to the /admindetail.php?action=edit endpoint to prevent SQL injection.
What are the potential impacts of CVE-2025-14652?
Exploitation of CVE-2025-14652 can lead to unauthorized data access or manipulation within the Online Cake Ordering System.
Who is affected by CVE-2025-14652?
CVE-2025-14652 affects users and administrators of the itsourcecode Online Cake Ordering System version 1.0.
Is CVE-2025-14652 exploitable remotely?
Yes, CVE-2025-14652 can be exploited remotely by attackers targeting the vulnerable /admindetail.php?action=edit file.