CVE-2025-12315

CVE-2025-12315 affects code-projects Food Ordering System 1.0. The vulnerability resides in the code path involving /admin/menu.php and specifically the manipulation of the itemPrice parameter, which can lead to SQL injection. It is exploitable remotely over the network, with exploitation publicl...

CVE-2025-12314

CVE-2025-12314 affects code-projects Food Ordering System 1.0. The vulnerability is triggered by manipulating the itemID argument in the unknown function of /admin/deleteitem.php, enabling SQL injection. This allows remote exploitation, and the public exploit has been released, indicating real-wo...