Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_cafe_ordering_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSimple Cafe Ordering System (61de5b0f-952a-56ba-9e5a-cc904a04fda3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9025 vulnerable 2026-06-08 07:45:21.606352 code-projects Simple Cafe Ordering System portal.php sql injection
MEDIUM (6.3)
A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-15T09:02:20.423Z
Updated: 2025-08-15T15:48:14.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13203 vulnerable 2026-06-08 07:04:31.780518 code-projects Simple Cafe Ordering System addmem.php sql injection
HIGH (7.3)
A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code of the file /addmem.php. Executing manipulation of the argument studentnum can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-11-15T17:32:05.607Z
Updated: 2025-11-17T16:04:15.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13202 vulnerable 2026-06-08 07:04:31.780112 code-projects Simple Cafe Ordering System add_to_cart cross site scripting
LOW (3.5)
A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /add_to_cart. Performing manipulation of the argument product_name results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Published: 2025-11-15T17:02:05.743Z
Updated: 2025-11-17T15:02:45.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13201 vulnerable 2026-06-08 07:04:31.778830 code-projects Simple Cafe Ordering System login.php sql injection
HIGH (7.3)
A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
Published: 2025-11-15T16:02:06.630Z
Updated: 2025-11-17T14:45:38.581Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.