PT-2025-15183 · Unknown · Codeprojects Online Restaurant Management System

P_Key · Publicado 2025-04-07 · Atualizado 2025-04-07 · CVE-2025-3336

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions codeprojects Online Restaurant Management System version 1.0

Description A critical issue was discovered in the codeprojects Online Restaurant Management System. The problem affects the file /admin/member save.php, where the manipulation of the last argument can lead to SQL injection. This issue can be exploited remotely.

Recommendations For codeprojects Online Restaurant Management System version 1.0, consider restricting access to the /admin/member save.php file until a patch is available. As a temporary workaround, avoid using the last argument in the affected file to minimize the risk of exploitation.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2025-3336

Produtos afetados

Codeprojects Online Restaurant Management System

Referências · 12

• 🔥 https://github.com/p1026/CVE/issues/50 · Exploit
• https://twitter.com/CVEnew/status/1909104818276225298 · Publicação no Twitter
• https://t.me/cvetracker/20961 · Publicação no Telegram
• https://t.me/latest_high_impact_cve/2096 · Publicação no Telegram
• https://vuldb.com/?ctiid.303550 · Nota
• https://twitter.com/transilienceai/status/1909137952287969293 · Publicação no Twitter
• https://twitter.com/vulns_space/status/1909121605608825256 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-3336 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-3336 · Nota de Segurança
• https://t.me/cvedetector/22251 · Publicação no Telegram
• https://vuldb.com/?submit.551910 · Nota
• https://vuldb.com/?id.303550 · Nota