CVE-2025-10837 code-projects Simple Food Ordering System order.php cross site scripting

A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /ordersimple/order.php. The manipulation of the argument ID leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-10837: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /ordersimple/order.php. The manipulation of the argument ID leads to cross site scripting. The attack may be initiated remotely. The...

Code-Projects Simple Food Ordering System 代码注入漏洞

Simple Food Ordering System is a simple food ordering system. Simple Food Ordering System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter ID in the file /ordersimple/order.php, which can be...

CVE-2025-10400

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...

PT-2025-37989

Name of the Vulnerable Software and Affected Versions: code-projects Food Ordering Review System version 1.0 Description: The Food Ordering Review System is susceptible to a Cross Site Scripting XSS issue. This issue affects the area where users submit reservation information. Recommendations: At...

CVE-2025-56280

The code-projects Food Ordering Review System version 1.0 is vulnerable to Cross-Site Scripting (XSS) due to the incorrect handling of user-submitted input in the reservation information area. This vulnerability allows for the execution of malicious scripts in a victim's browser. At this time, no...

CVE-2025-56280

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the area where users submit reservation information...

CVE-2025-56276

The code-projects Food Ordering Review System 1.0 is vulnerable to a Cross-Site Scripting (XSS) attack due to a failure to validate user input in the registration function . An attacker can inject malicious JavaScript code as a username . When an administrator views the user information, the scri...

CVE-2025-56280

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the area where users submit reservation information...

PT-2025-37988

Name of the Vulnerable Software and Affected Versions: code-projects Food Ordering Review System version 1.0 Description: The Food Ordering Review System is susceptible to a Cross Site Scripting XSS issue within the registration function. An attacker can inject malicious JavaScript code as a...

CVE-2025-56276

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the registration function. An attacker enters malicious JavaScript code as a username, which triggers the XSS vulnerability when the admin views user information, resulting in the disclosure of the admin's...

CVE-2025-56276

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the registration function. An attacker enters malicious JavaScript code as a username, which triggers the XSS vulnerability when the admin views user information, resulting in the disclosure of the admin's...

CVE-2025-10400

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-10400 SourceCodester Food Ordering Management System ticket-message.php sql injection

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-10400

CVE-2025-10400 affects SourceCodester Food Ordering Management System 1.0. The vulnerability is in the /routers/ticket-message.php function handling the ticket_id argument, where improper manipulation leads to SQL injection. Exploitation is possible remotely over a network, and publicly disclosed...

PT-2025-37414

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A security issue exists in SourceCodester Food Ordering Management System 1.0. The vulnerability is due to SQL injection in an unknown function of the file...

CVE-2025-9832

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2025-9832

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2025-9832

CVE-2025-9832 affects SourceCodester Food Ordering Management System 1.0. The vulnerability is in an unknown function within /routers/register-router.php where manipulation of the phone parameter enables SQL injection. It can be exploited remotely and exploit details have been publicly disclosed....

CVE-2025-9832 SourceCodester Food Ordering Management System register-router.php sql injection

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...