CVE-2025-12930

MediumCVSS 6.3

Published: 10/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

A SQL injection vulnerability has been found in SourceCodester Food Ordering System 1.0, specifically in the file /view-ticket.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Risk Assessment

The risk is the possibility of remotely executing unauthorized SQL queries, which could lead to disclosure of ticket data or other information.

Recommendation

It is recommended to update the system or apply patches, and to validate input data in view-ticket.php.

Other vulnerabilities in SourceCodester Food Ordering System

CVE-2025-12931Medium
A SQL injection vulnerability has been found in SourceCodester Food Ordering System 1.0, specifically in the file /routers/edit-orders.php. Manipulation of the ID argument results in SQL injection. The attack can be launched remotely. The exploit has been made public and could be used.

Original NVD description (English source)

A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS