PT-2025-47231 · Code Projects · Simple Pizza Ordering System

Published

2025-11-18

·

Updated

2025-11-23

·

CVE-2025-13323

CVSS v3.1
9.8
VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions code-projects Simple Pizza Ordering System version 1.0
Description A security flaw exists in code-projects Simple Pizza Ordering System 1.0. Manipulation of the 
ID
argument in the 
/listorder.php
file results in SQL injection. The attack can be initiated remotely. The exploit has been released publicly.
Recommendations As a temporary workaround, consider restricting access to the 
/listorder.php
file until a fix is available. Avoid using the 
ID
parameter in the 
/listorder.php
endpoint until the issue is resolved.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74CWE-89

Related Identifiers

CVE-2025-13323

Affected Products

Simple Pizza Ordering System