A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/combo.php. The manipulation of the argument del leads to sql injection. The attack ca...
Product
code-projects online restaurant management system vulnerabilities
15 published CVES affecting code-projects online restaurant management system, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 15
- Critical
- 1
- High
- 0
- Medium
- 14
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest code-projects online restaurant management system CVEs
Newest publication first
-
MediumCVSS 6.9 EPSS 0.57%
-
CVE-2025-3344 codeprojects Online Restaurant Management System assign_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/assign_save.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the atta...
-
CVE-2025-3343 codeprojects Online Restaurant Management System reservation_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/reservation_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initia...
-
CVE-2025-3342 codeprojects Online Restaurant Management System payment_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/payment_save.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated...
-
CVE-2025-3341 codeprojects Online Restaurant Management System reservation_view.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. This affects an unknown part of the file /admin/reservation_view.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the a...
-
CVE-2025-3340 codeprojects Online Restaurant Management System combo_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/combo_update.php. The manipulation of the argument ID leads to sql injection. The att...
-
CVE-2025-3339 codeprojects Online Restaurant Management System user_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user_update.php. The manipulation of the argument ID leads to sql injection. The attack can be l...
-
CVE-2025-3338 codeprojects Online Restaurant Management System user_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability classified as critical has been found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/user_save.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remot...
-
CVE-2025-3334 codeprojects Online Restaurant Management System category_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/category_save.php. The manipulation of the argument Category leads to sql injection. The attack ma...
-
CVE-2025-3333 codeprojects Online Restaurant Management System menu_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menu_update.php. The manipulation of the argument menu leads to sql injection. The atta...
-
CVE-2025-3332 codeprojects Online Restaurant Management System menu_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.61%A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/menu_save.php. The manipulation of the argument menu leads to sql injection. It is possible to launch the attac...
-
CVE-2025-3331 codeprojects Online Restaurant Management System payment_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.61%A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affects some unknown processing of the file /payment_save.php. The manipulation of the argument mode leads to sql injection. The attack may be ini...
-
CVE-2025-3330 codeprojects Online Restaurant Management System reservation_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.61%A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /reservation_save.php. The manipulation of the argument first leads to sql injection. The attack can be initiated remotely...
-
MediumCVSS 6.9 EPSS 0.65%
A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The ex...
-
CriticalCVSS 9.8 EPSS 0.89%
Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.