Code-projects Simple Cafe Ordering System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Code-projects Simple Cafe Ordering System: 3 record(s), with affected versions and fixes.

CVE-2025-13203 Critical · 9.8 CWE-89 Nov 15, 2025

code-projects Simple Cafe Ordering System addmem.php sql injection

A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code of the file /addmem.php. Executing manipulation of the argument studentnum can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

CVE-2025-13202 Medium · 5.4 CWE-79 Nov 15, 2025

code-projects Simple Cafe Ordering System add_to_cart cross site scripting

A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /add_to_cart. Performing manipulation of the argument product_name results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.

CVE-2025-13201 Critical · 9.8 CWE-89 Nov 15, 2025

code-projects Simple Cafe Ordering System login.php sql injection

A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.