SourceCodester Bakeshop Online Ordering System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SourceCodester Bakeshop Online Ordering System: 1 record(s), with affected versions and fixes.
CVE-2025-9660
Critical · 9.8
CWE-74 Aug 29, 2025
SourceCodester Bakeshop Online Ordering System passwordrecover.php sql injection
A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.