CVE-2025-9025: code-projects Simple Cafe Ordering System portal.php sql injection

Published Aug 15, 2025

Updated

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Simple Cafe Ordering System

Fabian Simple Cafe Ordering System=1.0

Event History

Aug 15, 2025

CVE Published

via MITRE·09:02 AM

Data Sourced

via MITRE·09:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeaknessAffected Software

Mar 11, 57926

Event

via FIRST·03:14 AM

Frequently Asked Questions

What is the severity of CVE-2025-9025?

CVE-2025-9025 is classified as a high-severity vulnerability due to its potential for SQL injection.

How do I fix CVE-2025-9025?

To fix CVE-2025-9025, sanitize and validate all user inputs, especially the ID parameter in the /portal.php file.

Who is affected by CVE-2025-9025?

CVE-2025-9025 affects users of the Code-projects Simple Cafe Ordering System version 1.0.

Can CVE-2025-9025 be exploited remotely?

Yes, CVE-2025-9025 can be exploited remotely, allowing attackers to execute arbitrary SQL commands.

What are the potential impacts of CVE-2025-9025?

The potential impacts of CVE-2025-9025 include unauthorized access to sensitive data and manipulation of the database.