PT-2025-47464 · Unknown · Restaurant

Rumana Khatun · Published 2025-11-19 · Updated 2025-11-19 · CVE-2025-63878

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Restaurant versions 1.0

Description A SQL injection flaw exists in the Restaurant website via the Contact Form page. This allows for potential unauthorized access or manipulation of the database. The Contact Form page is the entry point for this issue. The vulnerability involves the injection of malicious SQL code through user-supplied input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-63878

Affected Products

Restaurant

References · 6

• 🔥 https://github.com/rumanaemu/CVE-Research/blob/main/CVE-2025-63878.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63878 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63878 · Vendor Advisory
• https://twitter.com/CVEnew/status/1991187307458884050 · Twitter Post
• https://linkedin.com/in/rumana-khatun-208aa731b · Note
• https://t.me/cveNotify/143389 · Telegram Post