SourceCodester Simple Cafe Billing System 安全漏洞

SourceCodester Simple Cafe Billing System is an open source cafe billing system from SourceCodester. A security vulnerability exists in SourceCodester Simple Cafe Billing System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in the file...

PT-2025-35379

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cafe Billing System version 1.0 Description: A SQL injection issue exists in SourceCodester Simple Cafe Billing System 1.0. The vulnerability is located in the /sales report.php file, affecting an unknown function...

JVN#55678602: Improper file access permission settings in multiple i-フィルター products

Multiple i-フィルター products provided by Digital Arts Inc. contains the following vulnerability. Incorrect default permissions CWE-276 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 8.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8 CVE-2025-57846 Impact A...

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-9025

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-9025 code-projects Simple Cafe Ordering System portal.php sql injection

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-9025

The CVE concerns code-projects Simple Cafe Ordering System 1.0. The vulnerability exists in portal.php where the ID parameter is used unsafely, allowing SQL injection. The attack can be launched remotely and the exploit has been publicly disclosed. Connected sources corroborate the same flaw acro...

CVE-2025-9025 code-projects Simple Cafe Ordering System portal.php sql injection

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

PT-2025-33470 · Unknown · Simple Cafe Ordering System

Name of the Vulnerable Software and Affected Versions: Simple Cafe Ordering System version 1.0 Description: A vulnerability exists in the Simple Cafe Ordering System that allows for SQL injection. The issue is located in an unknown functionality within the /portal.php file. Manipulation of the ID...

Malicious code in tern-cafe (npm)

The package tern-cafe was found to contain malicious code...

Malicious code in og-cafe (npm)

The package og-cafe was found to contain malicious code...

MAL-2025-28159 Malicious code in og-cafe (npm)

The package og-cafe was found to contain malicious code...

MAL-2025-34728 Malicious code in tern-cafe (npm)

The package tern-cafe was found to contain malicious code...

Malicious Package

Overview cafebasics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Cyber Cafe Management System /index.php File SQL Injection Vulnerability

Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in file /index.php. An attacker can exploit this...

CVE-2025-7165

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...

CVE-2025-7164

A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched...

CVE-2025-7165

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...

CVE-2025-7165

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...