CVE-2025-22976

SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module...

CVE-2025-22976

creationtimestamp| type| source ---|---|--- 2025-01-15 22:47:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113834804072412874 2025-01-15 22:55:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1883 2025-01-15 23:16:03+00:00| seen|...

CVE-2025-22976

SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module...

CVE-2025-22976

A SQL Injection vulnerability exists in dingfanzuCMS v.1.0 , a PHP-based takeaway ordering website. The root cause is the application's failure to properly filter or validate externally entered SQL statements within the checkOrder.php module, specifically the shopId parameter. A local attacker ca...