CVE-2025-14652

CRITICAL 9.8CVE-2025-14652 · Published 14/12/2025 · updated 07/10/2026

Package	Affected versions	Patched versions
online cake ordering system admerc	`= 1.0`	No fix yet

Description

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.

References

moonrains/test · Exploit
itsourcecode.com · Product
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free