CVE-2025-9660

CVE-2025-9660 affects SourceCodester Bakeshop Online Ordering System 1.0. The vulnerability lies in the /passwordrecover.php file where manipulation of the phonenumber parameter enables SQL injection. Reports indicate the issue is remotely exploitable and that the exploit has been publicly disclo...