Approved changes feed: RSS · Atom

cpe:2.3:a:admerc:online_cake_ordering_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorAdmerc (1ba99a23-eff4-5bda-ab7f-36dedd101eaf)
ProductOnline Cake Ordering System (5e7ec1a8-a5a9-55eb-8c05-813fe6e5352e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15167 vulnerable 2026-06-08 07:06:35.821420 itsourcecode Online Cake Ordering System detailtransac.php sql injection
HIGH (7.3)
A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Published: 2025-12-29T02:02:07.978Z
Updated: 2025-12-29T18:00:29.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15166 vulnerable 2026-06-08 07:06:35.821023 itsourcecode Online Cake Ordering System updatesupplier.php sql injection
HIGH (7.3)
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
Published: 2025-12-29T01:32:07.201Z
Updated: 2025-12-29T18:57:13.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15165 vulnerable 2026-06-08 07:06:35.820618 itsourcecode Online Cake Ordering System updatecustomer.php sql injection
HIGH (7.3)
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-12-29T01:02:08.921Z
Updated: 2025-12-29T19:29:33.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14832 vulnerable 2026-06-08 07:06:35.220575 itsourcecode Online Cake Ordering System updateproduct.php sql injection
HIGH (7.3)
A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published: 2025-12-17T22:02:06.941Z
Updated: 2025-12-18T15:07:31.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14652 vulnerable 2026-06-08 07:06:34.905977 itsourcecode Online Cake Ordering System admindetail.php sql injection
HIGH (7.3)
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
Published: 2025-12-14T09:02:06.291Z
Updated: 2025-12-15T21:18:14.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14650 vulnerable 2026-06-08 07:06:34.903383 itsourcecode Online Cake Ordering System product.php sql injection
HIGH (7.3)
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
Published: 2025-12-14T08:02:06.327Z
Updated: 2025-12-15T21:22:27.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14649 vulnerable 2026-06-08 07:06:34.894148 itsourcecode Online Cake Ordering System supplier.php sql injection
HIGH (7.3)
A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
Published: 2025-12-14T07:32:05.951Z
Updated: 2025-12-15T21:21:36.906Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.