CVE-2025-15165: itsourcecode Online Cake Ordering System updatecustomer.php sql injection
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15165?
CVE-2025-15165 has a high severity due to its potential for SQL injection, which can lead to unauthorized data access and manipulation.
How do I fix CVE-2025-15165?
To fix CVE-2025-15165, you should validate and sanitize user inputs for the ID parameter in the /updatecustomer.php?action=edit file.
What types of systems are affected by CVE-2025-15165?
CVE-2025-15165 affects the itsourcecode Online Cake Ordering System version 1.0.
Can CVE-2025-15165 be exploited remotely?
Yes, CVE-2025-15165 can be exploited remotely, making it critical to address it promptly.
What kind of attack is possible with CVE-2025-15165?
CVE-2025-15165 can be exploited through SQL injection attacks, allowing attackers to execute unauthorized SQL commands.