CVE-2025-6122: code-projects Restaurant Order System table.php sql injection

Published Jun 16, 2025

Updated

A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects an unknown part of the file /table.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Restaurant Order System

Fabian Restaurant Order System=1.0

Event History

Jun 16, 2025

CVE Published

via MITRE·12:31 PM

Data Sourced

via MITRE·12:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

May 13, 57455

Event

via FIRST·04:45 AM

Frequently Asked Questions

What is the severity of CVE-2025-6122?

CVE-2025-6122 is classified as a critical vulnerability due to the potential for remote SQL injection attacks.

How do I fix CVE-2025-6122?

To fix CVE-2025-6122, sanitize and validate all user inputs to prevent SQL injection in the /table.php file.

What software versions are affected by CVE-2025-6122?

CVE-2025-6122 affects version 1.0 of the Code-projects Restaurant Order System.

Can CVE-2025-6122 be exploited remotely?

Yes, CVE-2025-6122 can be exploited remotely, allowing attackers to manipulate database queries.

What is the impact of exploiting CVE-2025-6122?

Exploiting CVE-2025-6122 can lead to unauthorized access to the database, potentially exposing sensitive data.