CVE-2025-12299

A vulnerability in Simple Food Ordering System 1.0 affects the /listorder.php file. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability has been found in code-projects Simple Food Ordering System 1.0 affecting some unknown functionality of the file /saveorder.php. Manipulation of the ID argument leads to SQL injection.

A cross-site scripting (XSS) vulnerability was detected in code-projects Simple Food Ordering System 1.0 in an unknown function of /editproduct.php. Manipulation of the pname/category/price arguments allows injection of malicious script. The attack can be launched remotely and the exploit is publicly available.

A cross-site scripting (XSS) vulnerability was identified in code-projects Simple Food Ordering System 1.0 in an unknown part of /editcategory.php. Manipulation of the pname argument leads to injection of malicious script. The attack can be launched remotely and the exploit is publicly available.

A SQL injection vulnerability was found in Simple Food Ordering System 1.0 in /editproduct.php. Manipulation of the Category argument allows remote SQL injection. The exploit is publicly available.

SourceCodester Simple Food Ordering System 1.0 has a vulnerability in process_order.php. Manipulation of the order argument leads to cross-site scripting (XSS), and the attack can be performed remotely. The exploit has been publicly disclosed.