CNNVD-202506-1890 Information

CNNVD ID

CNNVD-202506-1890

CVE-2025-6124

  • CNNVD Published: 2025-06-16

Description (Chinese)

Code-Projects Restaurant Order System是Code-Projects开源的一个餐厅订单系统。 Code-Projects Restaurant Order System 1.0版本存在注入漏洞,该漏洞源于对文件/tablelow.php中参数ID的错误操作导致SQL注入。

Description (English)

Code-Projects Restaurant Order System is a restaurant order system open to Code-Projects. Code-Projects Restaurant Order System Version 1.0 has an injection loophole, which results from an error in the performance of the parameter ID in the file/tablelow.php that resulted in the SQL injection.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

Code-Projects

Published

2025-06-16

Last Modified

2026-02-24

References

https://vuldb.com/?submit.592625 https://vuldb.com/?id.312593 https://vuldb.com/?ctiid.312593 https://github.com/ez-lbz/poc/issues/4 https://code-projects.org/ https://access.redhat.com/security/cve/cve-2025-6124 https://nvd.nist.gov/vuln/detail/CVE-2025-6124

Share on: