SQL Injection Vulnerability in Simple Pizza Ordering System by Code-Projects
CVE-2025-6364

6.9MEDIUM

Key Information:

Vendor

Code-projects

Status
Simple Pizza Ordering System
Vendor
CVE Published:
20 June 2025

What is CVE-2025-6364?

A vulnerability exists in the Simple Pizza Ordering System (version 1.0), specifically in the file /adduser-exec.php. This vulnerability allows attackers to exploit an unknown functionality by manipulating the Username parameter, which can lead to SQL injection attacks. The flaw facilitates remote exploitation, enabling potential unauthorized access to the underlying database and compromising sensitive information.

Affected Version(s)

Simple Pizza Ordering System 1.0

References

https://vuldb.com/?id.313357
vdb-entrytechnical-description
https://vuldb.com/?ctiid.313357
signaturepermissions-required
https://vuldb.com/?submit.597305
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

rom4j (VulDB User)
.
CVE-2025-6364 : SQL Injection Vulnerability in Simple Pizza Ordering System by Code-Projects