CVE-2025-12931

MediumCVSS 6.3

Published: 10/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

A SQL injection vulnerability has been found in SourceCodester Food Ordering System 1.0, specifically in the file /routers/edit-orders.php. Manipulation of the ID argument results in SQL injection. The attack can be launched remotely. The exploit has been made public and could be used.

Risk Assessment

The risk includes the possibility of remotely executing unauthorized database queries, which could lead to disclosure or modification of order data.

Recommendation

It is recommended to update the system or apply patches, and to validate input data in edit-orders.php.

Other vulnerabilities in SourceCodester Food Ordering System

CVE-2025-12930Medium
A SQL injection vulnerability has been found in SourceCodester Food Ordering System 1.0, specifically in the file /view-ticket.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Original NVD description (English source)

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS