CVE Details
Basic Information
| Title | code-projects Simple Pizza Ordering System cashconfirm.php sql injection |
|---|---|
| Type | cve |
| Published | 2025-06-20T18:31:04.986Z |
| Last Seen |
Product Information
| Vendor | code-projects |
|---|---|
| Product | Simple Pizza Ordering System |
| Version | 1.0 |
CVSS Information
| Base Score | 6.9 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| Confidentiality Impact | |
| Integrity Impact | |
| Availability Impact |
AI Analysis
| AI Description | A SQL injection vulnerability exists in the cashconfirm.php file of the Simple Pizza Ordering System. This allows remote attackers to inject malicious SQL code via the transactioncode argument, potentially leading to unauthorized data access or modification. |
|---|---|
| AI Severity | High |
| Vendor | code-projects |
| Product | Simple Pizza Ordering System |
| Affected Version | 1.0 |
Affected Products
- code-projects Simple Pizza Ordering System 1.0
Additional Information
| CVE List | |
|---|---|
| CWE List | CWE-89, CWE-74 |
| Bulletin Family |
References
Description
A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cashconfirm.php. The manipulation of the argument transactioncode leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.