CVE-2025-4936: projectworlds Online Food Ordering System admin-page.php sql injection

Published May 19, 2025

Updated

A vulnerability was found in projectworlds Online Food Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin-page.php. The manipulation of the argument 1price leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Projectworlds Online Food Ordering System

Projectworlds Online Food Ordering System=1.0

Event History

May 19, 2025

CVE Published

via MITRE·02:31 PM

Data Sourced

via MITRE·02:31 PM

DescriptionSeverityWeakness

Jun 24, 57411

Event

via FIRST·03:33 AM

Frequently Asked Questions

What is the severity of CVE-2025-4936?

CVE-2025-4936 has been classified as a critical vulnerability.

How does CVE-2025-4936 affect the Online Food Ordering System?

CVE-2025-4936 affects the Online Food Ordering System due to an SQL injection vulnerability found in the /admin-page.php file.

Can CVE-2025-4936 be exploited remotely?

Yes, CVE-2025-4936 can be exploited remotely.

What type of attack is associated with CVE-2025-4936?

CVE-2025-4936 is associated with SQL injection attacks.

What should be done to protect against CVE-2025-4936?

To protect against CVE-2025-4936, it is essential to sanitize inputs and apply patches to the Online Food Ordering System.