CNNVD-202510-1081 Information

CNNVD ID

CNNVD-202510-1081

CVE-2025-11396

  • CNNVD Published: 2025-10-07

Description (Chinese)

Code-Projects Simple Food Ordering System是Code-Projects开源的一个简单的食品订购系统。 code-projects Simple Food Ordering System 1.0版本存在安全漏洞,该漏洞源于对文件/product.php中参数Category的错误操作,可能导致SQL注入攻击。

Description (English)

The Code-Projects Simple Food Ordering System is a simple food ordering system open to Code-Projects. A security loophole exists in version 1.0 of code-projects Simple Food Ordering System, which stems from an error in Category, the parameter in document/product.php, which may result in an injection attack on SQL.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Code-Projects

Published

2025-10-07

Last Modified

2026-02-24

References

https://code-projects.org/ https://github.com/tiancesec/CVE/issues/6 https://vuldb.com/?ctiid.327333 https://vuldb.com/?id.327333 https://vuldb.com/?submit.665011

Share on: