PT-2025-30100 · Unknown · Food Ordering Review System

N0Name · Published 2025-07-18 · Updated 2025-07-19 · CVE-2025-7814

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Food Ordering Review System version 1.0

Description A critical vulnerability exists in the Food Ordering Review System. The vulnerability affects unknown code within the /pages/signup function.php file. Manipulation of the fname argument can lead to SQL injection. The attack can be initiated remotely, and the exploit has been publicly disclosed. Other parameters may also be affected.

Recommendations Address the SQL injection vulnerability in the /pages/signup function.php file by sanitizing the fname argument.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-7814

Affected Products

Food Ordering Review System

References · 10

• 🔥 https://github.com/n0name-yang/myCVE/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7814 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7814 · Vendor Advisory
• https://vuldb.com/?submit.616770 · Note
• https://t.me/cvetracker/28181 · Telegram Post
• https://t.me/cvenotify/129518 · Telegram Post
• https://vuldb.com/?ctiid.316918 · Note
• https://twitter.com/CVEnew/status/1946327029932232735 · Twitter Post
• https://vuldb.com/?id.316918 · Note
• https://code-projects.org · Note