PT-2025-53382 · Itsourcecode · Itsourcecode Online Frozen Foods Ordering System

Seven7

·

CVE-2025-15073

·

Published

2025-12-24

·

Updated

2025-12-30

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions itsourcecode Online Frozen Foods Ordering System version 1.0
Description A SQL injection issue exists in itsourcecode Online Frozen Foods Ordering System version 1.0. The issue is located in the /contact us.php file. Manipulation of the Name argument can lead to SQL injection. The attack can be initiated remotely. The exploit has been publicly disclosed.
Recommendations Apply a fix for itsourcecode Online Frozen Foods Ordering System version 1.0.

Exploit

Fix

Special Elements Injection

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-74CWE-89

Related Identifiers

CVE-2025-15073

Affected Products

Itsourcecode Online Frozen Foods Ordering System