Janobe Bakeshop Online Ordering System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Janobe Bakeshop Online Ordering System: 1 record(s), with affected versions and fixes.
cpe:2.3:a:janobe:bakeshop_online_ordering_system

CVE-2025-9660 Critical · 9.8 CWE-74 Aug 29, 2025

SourceCodester Bakeshop Online Ordering System passwordrecover.php sql injection

A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.