PT-2025-45600 · Sourcecodester · Sourcecodester Ordering System

Yuki77 · Published 2025-11-10 · Updated 2025-11-10 · CVE-2025-12931

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Food Ordering System version 1.0

Description A SQL injection issue exists in SourceCodester Food Ordering System 1.0. The issue is located in an unknown functionality within the /routers/edit-orders.php file. Manipulating the ID parameter can lead to SQL injection. The attack can be launched remotely, and the exploit has been publicly released.

Recommendations SourceCodester Food Ordering System version 1.0: Address the SQL injection issue in the /routers/edit-orders.php file by sanitizing or validating the ID parameter to prevent malicious code execution.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-12931

Affected Products

Sourcecodester Ordering System

References · 11

• 🔥 https://github.com/puppytgyh/-CVE/issues/5 · Exploit
• https://osv.dev/vulnerability/CVE-2025-12931 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12931 · Security Note
• https://twitter.com/CVEnew/status/1987744014875898085 · Twitter Post
• https://vuldb.com/?ctiid.331651 · Note
• https://vuldb.com/?id.331651 · Note
• https://sourcecodester.com · Note
• https://twitter.com/VulmonFeeds/status/1987781495277179106 · Twitter Post
• https://t.me/cveNotify/142245 · Telegram Post
• https://t.me/CVEtracker/36896 · Telegram Post
• https://vuldb.com/?submit.682234 · Note