CVE-2025-14251

Name of the Vulnerable Software and Affected Versions code-projects Online Ordering System version 1.0

Description A security issue exists in code-projects Online Ordering System 1.0. The vulnerability involves the manipulation of the Username argument, leading to SQL injection. This affects an unknown function within the /admin/ file of the Admin Login component. The attack can be launched remotely, and details about the exploit have been publicly disclosed.

Recommendations Apply any available updates to address the SQL injection issue in the Admin Login component. As a temporary workaround, restrict access to the /admin/ file to minimize the risk of exploitation. Sanitize the Username input to prevent SQL injection attacks.