CVE-2025-3340: codeprojects Online Restaurant Management System combo_update.php sql injection
A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/comboupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3340?
CVE-2025-3340 is classified as a critical vulnerability that allows for SQL injection.
How do I fix CVE-2025-3340?
To fix CVE-2025-3340, ensure that all user inputs are properly sanitized and use prepared statements to prevent SQL injection.
What systems are affected by CVE-2025-3340?
CVE-2025-3340 affects the codeprojects Online Restaurant Management System version 1.0.
What type of attack does CVE-2025-3340 enable?
CVE-2025-3340 enables an SQL injection attack through manipulation of the argument ID in the /admin/combo_update.php file.
Can CVE-2025-3340 lead to data compromise?
Yes, CVE-2025-3340 can lead to data compromise by allowing attackers to execute arbitrary SQL commands on the database.