CVE-2025-6363: code-projects Simple Pizza Ordering System adding-exec.php sql injection
Published Jun 20, 2025
·Updated
A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /adding-exec.php. The manipulation of the argument ingname leads to sql injection. It is possible to launch the attack remotely.
Affected Software
2 affected components
Code-projects Simple Pizza Ordering System
Carmelo Simple Pizza Ordering System=1.0
Event History
Jun 20, 2025
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 13, 58473
Event
via NVD·04:25 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-6363?
CVE-2025-6363 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2025-6363?
CVE-2025-6363 is a SQL injection vulnerability.
3
Which file is affected by CVE-2025-6363?
The vulnerability affects the file /adding-exec.php in the Simple Pizza Ordering System.
4
How can CVE-2025-6363 be exploited?
CVE-2025-6363 can be exploited remotely by manipulating the argument 'ingname'.
5
How do I fix CVE-2025-6363?
To fix CVE-2025-6363, ensure that proper parameterized queries or prepared statements are used in the application's SQL calls.