SQL Injection Vulnerability in Restaurant Order System by Restaurant Corp
CVE-2025-52327

Currently unrated

Key Information:

Vendor
CVE Published:
1 August 2025

What is CVE-2025-52327?

An SQL Injection vulnerability exists in the Restaurant Order System 1.0, which can be exploited by local attackers. By manipulating input data sent to the payment.php file, an attacker can gain unauthorized access to sensitive data stored in the system's database. This flaw underscores the importance of implementing proper input validation and utilizing prepared statements to protect against such injection attacks.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.