CVE-2025-12931

CRITICAL 9.8CVE-2025-12931 · Published 10/11/2025 · updated 07/10/2026

Package	Affected versions	Patched versions
food ordering system janobe	`= 1.0`	No fix yet

Description

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

References

puppytgyh/-CVE · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
sourcecodester.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free