CVE-2025-3330 MEDIUM

CVE-2025-3330: codeprojects Online Restaurant Management System reservation_save.php sql injection

Vendor Codeprojects
Product Online Restaurant Management System
Weakness CWE-89 · SQLi
Published April 7, 2025
Last update April 7, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /reservation_save.php. The manipulation of the argument first leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Key dates

02Disclosure timeline

April 7, 2025 CVE published
April 7, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-5098 SourceCodester Simple Inventory System login.php sql injection CVE-2025-48274 WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability CVE-2023-41884 ZoneMinder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in watch.php CVE-2021-24137 Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection CVE-2024-0462 code-projects Online Faculty Clearance HTTP POST Request designee_view_status.php sql injection