CVE-2025-6479: code-projects Simple Pizza Ordering System salesreport.php sql injection
A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an unknown part of the file /salesreport.php. The manipulation of the argument dayfrom leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6479?
CVE-2025-6479 is classified as a critical vulnerability.
How does the CVE-2025-6479 vulnerability occur?
CVE-2025-6479 occurs due to SQL injection in the /salesreport.php file, specifically in the manipulation of the argument dayfrom.
Can CVE-2025-6479 be exploited remotely?
Yes, CVE-2025-6479 can be exploited remotely by attackers.
What systems are affected by CVE-2025-6479?
CVE-2025-6479 affects the Simple Pizza Ordering System version 1.0.
How can CVE-2025-6479 be mitigated?
CVE-2025-6479 can be mitigated by implementing input validation and prepared statements to prevent SQL injection.