Lucene search
K

19 matches found

CNVD
CNVD
added 2025/11/18 12:0 a.m.3 views

Simple Cafe Ordering System addmem.php File SQL Injection Vulnerability

Simple Cafe Ordering System is a simple coffee ordering system. Simple Cafe Ordering System suffers from a SQL injection vulnerability that originates from the lack of secure filtering of the studentnum parameter in the /addmem.php file. No details of the vulnerability are available at this time...

9.8CVSS7.8AI score0.00028EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/16 5:47 p.m.5 views

CVE-2025-13203

A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code of the file /addmem.php. Executing manipulation of the argument studentnum can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

9.8CVSS7.3AI score0.00028EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/15 6:30 p.m.1 views

EUVD-2025-197703

A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /addtocart. Performing manipulation of the argument productname results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.1CVSS5.3AI score0.00027EPSS
Exploits1References6
EUVD
EUVD
added 2025/11/15 6:30 p.m.1 views

EUVD-2025-197701

A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly availab...

7.5CVSS7.2AI score0.00028EPSS
Exploits1References6
CVE
CVE
added 2025/11/15 5:32 p.m.11 views

CVE-2025-13203

Concrete details found: Simple Cafe Ordering System 1.0 has a vulnerability in /addmem.php where manipulating the studentnum parameter enables SQL injection. Remote exploitability is indicated, and multiple sources (NVD, Red Hat, CNVD, CNNVD, CVE lists, and Vuln enrichment) confirm the issue and ...

9.8CVSS7.3AI score0.00028EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/15 5:32 p.m.1 views

CVE-2025-13203 code-projects Simple Cafe Ordering System addmem.php sql injection

A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code of the file /addmem.php. Executing manipulation of the argument studentnum can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS7.3AI score0.00028EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/15 5:2 p.m.2 views

CVE-2025-13202 code-projects Simple Cafe Ordering System add_to_cart cross site scripting

A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /addtocart. Performing manipulation of the argument productname results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.1CVSS5.4AI score0.00027EPSS
Exploits1References5
CVE
CVE
added 2025/11/15 5:2 p.m.10 views

CVE-2025-13202

The CVE-2025-13202 entry concerns code-projects Simple Cafe Ordering System 1.0. A cross-site scripting vulnerability exists in the /add_to_cart mechanism, triggered by manipulating the product_name parameter in that file. The vulnerability is described as exploitable remotely, and public exploit...

5.4CVSS3.9AI score0.00027EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/11/15 4:15 p.m.2 views

CVE-2025-13201

A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly availab...

9.8CVSS0.00028EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/15 12:0 a.m.3 views

PT-2025-47058

Name of the Vulnerable Software and Affected Versions Simple Cafe Ordering System version 1.0 Description A security flaw exists in Simple Cafe Ordering System 1.0. The issue involves cross site scripting, potentially initiated remotely, through manipulation of the product name argument in the fi...

5.1CVSS5.7AI score0.00027EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/11/15 12:0 a.m.1 views

Code-Projects Simple Cafe Ordering System SQL注入漏洞

Simple Cafe Ordering System is a simple coffee ordering system. Simple Cafe Ordering System suffers from a SQL injection vulnerability that originates from the lack of secure filtering of the studentnum parameter in the /addmem.php file. No details of the vulnerability are available at this time...

9.8CVSS7.8AI score0.00028EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/15 12:0 a.m.3 views

PT-2025-47057

Name of the Vulnerable Software and Affected Versions Simple Cafe Ordering System version 1.0 Description A SQL injection issue exists in Simple Cafe Ordering System 1.0. The issue is related to the manipulation of the Username parameter within the /login.php file. This manipulation can be...

9.8CVSS7.5AI score0.00028EPSS
Exploits1References12
GithubExploit
GithubExploit
added 2025/10/30 8:7 a.m.120 views

cafeorder_vuln_SQL

cafeordervulnSQL Proof-of-Concept and Advisory for Simple Ca...

8.2AI score
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-25009

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.0007EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/08/17 9:24 a.m.8 views

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

8.8CVSS7.6AI score0.0007EPSS
Exploits1References1
OSV
OSV
added 2025/08/15 9:15 a.m.0 views

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

8.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/08/15 9:15 a.m.3 views

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

8.8CVSS0.0007EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/15 9:2 a.m.4 views

CVE-2025-9025 code-projects Simple Cafe Ordering System portal.php sql injection

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

6.5CVSS7.5AI score0.0007EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/08/15 12:0 a.m.4 views

PT-2025-33470 · Unknown · Simple Cafe Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Cafe Ordering System version 1.0 Description: A vulnerability exists in the Simple Cafe Ordering System that allows for SQL injection. The issue is located in an unknown functionality within the /portal.php file. Manipulation of the ID...

8.8CVSS6.6AI score0.0007EPSS
Exploits1References9
Rows per page
Query Builder