CVE-2025-10400

Name of the Vulnerable Software and Affected Versions SourceCodester Food Ordering Management System version 1.0

Description A security issue exists in SourceCodester Food Ordering Management System 1.0. The vulnerability is due to SQL injection in an unknown function of the file /routers/ticket-message.php. Manipulation of the ticket id argument can lead to SQL injection. The exploit has been publicly disclosed and may be used.

Recommendations As a temporary workaround, consider restricting access to the /routers/ticket-message.php file until a fix is available. Sanitize the ticket id argument to prevent SQL injection attacks.