CVE-2025-14249 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /user_school.php. The m…
Medium CVSS: 6.9

CVE-2025-14249

A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /user_school.php. The manipulation of the argument product_id results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited.
Vendor
Fabian
Product
Online Ordering System
CWE
CWE-74
Yayın Tarihi
2025-12-08 15:15:49
Güncelleme
2025-12-10 17:37:03
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Online Ordering System MEDIUM Fabian 2025

Referanslar

https://code-projects.org/ https://github.com/zzb1388/cve/issues/93 https://vuldb.com/?ctiid.334759 https://vuldb.com/?id.334759 https://vuldb.com/?submit.702465 https://github.com/zzb1388/cve/issues/93