First published: Mon Apr 07 2025(Updated: )
A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/member_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
codeprojects Online Restaurant Management System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-3337 has been rated as critical due to its potential for causing significant damage through SQL injection.
To fix CVE-2025-3337, ensure proper input validation and use parameterized queries to secure the member_update.php file.
CVE-2025-3337 is an SQL injection vulnerability affecting the Online Restaurant Management System.
The affected file for CVE-2025-3337 is /admin/member_update.php.
An attacker can exploit CVE-2025-3337 to manipulate the ID argument and execute arbitrary SQL commands in the database.