GCVE - cpe:2.3:a:campcodes:online_food_ordering

Approved changes feed: RSS · Atom

cpe:2.3:a:campcodes:online_food_ordering_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Campcodes (`0cbc38b8-6075-5b10-9920-3b1d3efa5f42`)
Product	Online Food Ordering System (`df2923d9-8b77-5b7f-a05a-3df23303f5d3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-4549`	vulnerable	2026-06-08 07:29:16.428988	Campcodes Online Food Ordering System register-router.php sql injection HIGH (7.3) A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-11T22:00:06.655Z Updated: 2025-05-12T18:53:17.173Z Open on db.gcve.eu Reference links https://vuldb.com/?id.308296 https://vuldb.com/?ctiid.308296 https://vuldb.com/?submit.567549 https://github.com/jhs1121/cve/issues/3 https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4548`	vulnerable	2026-06-08 07:29:16.428586	Campcodes Online Food Ordering System router.php sql injection HIGH (7.3) A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/router.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-11T21:31:05.460Z Updated: 2025-05-12T18:55:01.698Z Open on db.gcve.eu Reference links https://vuldb.com/?id.308295 https://vuldb.com/?ctiid.308295 https://vuldb.com/?submit.567547 https://github.com/jhs1121/cve/issues/1 https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4507`	vulnerable	2026-06-08 07:29:16.363477	Campcodes Online Food Ordering System add-item.php sql injection HIGH (7.3) A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/add-item.php. The manipulation of the argument price leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-10T16:31:04.801Z Updated: 2025-05-12T15:06:31.715Z Open on db.gcve.eu Reference links https://vuldb.com/?id.308223 https://vuldb.com/?ctiid.308223 https://vuldb.com/?submit.567170 https://github.com/TEhS411/cve/issues/6 https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4506`	vulnerable	2026-06-08 07:29:16.363074	Campcodes Online Food Ordering System menu-router.php sql injection HIGH (7.3) A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1_price leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-10T16:00:08.630Z Updated: 2025-05-12T17:44:34.642Z Open on db.gcve.eu Reference links https://vuldb.com/?id.308222 https://vuldb.com/?ctiid.308222 https://vuldb.com/?submit.567169 https://github.com/TEhS411/cve/issues/5 https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4492`	vulnerable	2026-06-08 07:29:16.317428	Campcodes Online Food Ordering System ticket-message.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticket_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-09T21:31:04.462Z Updated: 2025-05-10T01:39:52.396Z Open on db.gcve.eu Reference links https://vuldb.com/?id.308207 https://vuldb.com/?ctiid.308207 https://vuldb.com/?submit.566787 https://github.com/wyl091256/CVE/issues/12 https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4491`	vulnerable	2026-06-08 07:29:16.316986	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4490`	vulnerable	2026-06-08 07:29:16.316498	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4489`	vulnerable	2026-06-08 07:29:16.314920	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Online Food Ordering System

PURL mappings

Vulnerability references

Contribute