Approved changes feed: RSS · Atom

cpe:2.3:a:carmelo:food_ordering_review_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCarmelo (6b035a27-935d-5e7e-afc6-e62cb1b98eda)
ProductFood Ordering Review System (35711466-f5ab-5d88-a77d-0f0d19fa6019)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8165 vulnerable 2026-06-03 15:13:43.038638 code-projects Food Review System approve_reservation.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Food Review System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/approve_reservation.php. The manipulation of the argument occasion leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T18:32:05.931Z
Updated: 2025-07-25T18:52:51.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8018 vulnerable 2026-06-03 15:13:42.037587 code-projects Food Ordering Review System reservation_page.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Food Ordering Review System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/reservation_page.php. The manipulation of the argument reg_Id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-07-22T14:32:05.436Z
Updated: 2025-07-22T14:46:59.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7814 vulnerable 2026-06-03 15:13:41.545441 code-projects Food Ordering Review System signup_function.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in code-projects Food Ordering Review System 1.0. This vulnerability affects unknown code of the file /pages/signup_function.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-07-18T21:44:05.160Z
Updated: 2025-07-21T15:19:20.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-56280 vulnerable 2026-06-03 15:04:59.379342 Details available
code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the area where users submit reservation information.
Published: 2025-09-16T00:00:00.000Z
Updated: 2025-09-16T17:27:23.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-56276 vulnerable 2026-06-03 15:04:59.378978 Details available
code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the registration function. An attacker enters malicious JavaScript code as a username, which triggers the XSS vulnerability when the admin views user information, resulting in the disclosure of the admin's cookie information.
Published: 2025-09-16T00:00:00.000Z
Updated: 2025-09-16T18:33:15.328Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.