CNNVD-202509-1873 Information
CNNVD ID
CNNVD-202509-1873
Related CVE
- CNNVD Published: 2025-09-14
Description (Chinese)
SourceCodester Food Ordering Management System是SourceCodester开源的一个食品订购管理系统。 SourceCodester Food Ordering Management System 1.0版本存在SQL注入漏洞,该漏洞源于对文件/routers/ticket-message.php中参数ticket_id的错误操作,可能导致SQL注入攻击。
Description (English)
SourceCodester Food Ordering Management System is a food order management system that is an open source for ServiceCodester. SourceCodester Food Ordering Management System Version 1.0 contains an injection loophole in SQL, which stems from a mishandling of the parameter ticket id in document/routers/ticket-message.php, which may lead to an attack on SQL injection.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
Sparkle Motion
Published
2025-09-14
Last Modified
2026-02-24
References
https://vuldb.com/?submit.646713 https://vuldb.com/?ctiid.323835 https://vuldb.com/?id.323835 https://www.sourcecodester.com/ https://github.com/lrjbsyh/CVE_Hunter/issues/12 https://access.redhat.com/security/cve/cve-2025-10400
Share on: