CVE-2025-15074: itsourcecode Online Frozen Foods Ordering System customer_details.php sql injection
A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15074?
The severity of CVE-2025-15074 is considered high due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-15074?
To fix CVE-2025-15074, validate and sanitize all user inputs, particularly in the /customer_details.php file.
Who is affected by CVE-2025-15074?
Users of the itsourcecode Online Frozen Foods Ordering System 1.0 are affected by CVE-2025-15074.
What is the impact of CVE-2025-15074?
The impact of CVE-2025-15074 includes unauthorized access to user data and the possibility of database compromise through SQL injection.
Is there a public exploit available for CVE-2025-15074?
Yes, an exploit for CVE-2025-15074 is publicly available, which increases the risk for affected systems.