CVE-2025-6482: code-projects Simple Pizza Ordering System edituser-exec.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /edituser-exec.php. The manipulation of the argument userid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6482?
CVE-2025-6482 is classified as a critical vulnerability.
How does CVE-2025-6482 affect the Simple Pizza Ordering System?
CVE-2025-6482 allows remote SQL injection through the manipulation of the argument userid in the /edituser-exec.php file.
What are the potential impacts of exploiting CVE-2025-6482?
Exploitation of CVE-2025-6482 can lead to unauthorized access and manipulation of the database.
How do I fix CVE-2025-6482 in my Simple Pizza Ordering System?
To fix CVE-2025-6482, ensure that all user inputs are properly sanitized and parameterized queries are used for database access.
Is there a way to mitigate CVE-2025-6482 if I cannot immediately patch my system?
As a temporary mitigation for CVE-2025-6482, consider implementing web application firewall rules to filter out malicious input.