CVE-2025-6363

A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /adding-exec.php. The manipulation of the argument ingname leads to sql injection. It is possible to launch the attack remotely.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2025-06-20

Last modified

2025-06-23

Weaknesses

CWE-74, CWE-89

Affected products

• Simple Pizza Ordering System (Carmelo)
• Simple Pizza Ordering System (Code-projects)

References

• https://code-projects.org/
• https://github.com/rom4j/cve/issues/7
• https://vuldb.com/?ctiid.313356
• https://vuldb.com/?id.313356
• https://vuldb.com/?submit.597304