CVE-2025-13290

A vulnerability in Simple Food Ordering System 1.0 affects the /listorder.php file. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.

A cross-site scripting (XSS) vulnerability was detected in code-projects Simple Food Ordering System 1.0 in an unknown function of /editproduct.php. Manipulation of the pname/category/price arguments allows injection of malicious script. The attack can be launched remotely and the exploit is publicly available.

A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument pname/category/price results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

A cross-site scripting (XSS) vulnerability was identified in code-projects Simple Food Ordering System 1.0 in an unknown part of /editcategory.php. Manipulation of the pname argument leads to injection of malicious script. The attack can be launched remotely and the exploit is publicly available.

A SQL injection vulnerability was found in Simple Food Ordering System 1.0 in /editproduct.php. Manipulation of the Category argument allows remote SQL injection. The exploit is publicly available.

SourceCodester Simple Food Ordering System 1.0 has a vulnerability in process_order.php. Manipulation of the order argument leads to cross-site scripting (XSS), and the attack can be performed remotely. The exploit has been publicly disclosed.