CVE-2025-9701

CVE-2025-9701 affects SourceCodester Simple Cafe Billing System 1.0. The vulnerability is a SQL injection in the file /receipt.php, caused by manipulation of the ID parameter, enabling remote exploitation. Multiple linked sources (NVD, Red Hat, CVE lists, and security notes) confirm remote attack...

CVE-2025-9702

CVE-2025-9702 affects SourceCodester Simple Cafe Billing System 1.0. The vulnerability is a SQL injection in the /sales_report.php file triggered by manipulating the month parameter, enabling remote exploitation. Multiple sources confirm this, with exploitation publicly available and high-severit...