PT-2025-20671 · Unknown · Campcodes Online Food Ordering System
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Campcodes Online Food Ordering System version 1.0
Description
A critical issue was found in the system, affecting the file /routers/register-router.php. The manipulation of the
Name argument leads to SQL injection. This issue can be exploited remotely.Recommendations
For Campcodes Online Food Ordering System version 1.0, consider restricting access to the
/routers/register-router.php file until a patch is available. As a temporary workaround, avoid using the Name argument in the affected file to minimize the risk of exploitation.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Campcodes Online Food Ordering System