CVE-2025-3339: codeprojects Online Restaurant Management System user_update.php sql injection
A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/userupdate.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3339?
CVE-2025-3339 is classified as a critical vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-3339?
To fix CVE-2025-3339, you should sanitize and validate the input for the ID argument in the /admin/user_update.php file to prevent SQL injection.
What type of vulnerability is CVE-2025-3339?
CVE-2025-3339 is categorized as an SQL injection vulnerability impacting the Online Restaurant Management System.
Which software is affected by CVE-2025-3339?
CVE-2025-3339 affects the codeprojects Online Restaurant Management System version 1.0.
What can happen if CVE-2025-3339 is exploited?
Exploitation of CVE-2025-3339 could allow an attacker to execute arbitrary SQL commands on the database, potentially compromising sensitive data.