Product by Code-projects
Online Ordering System
11 known vulnerabilities in Online Ordering System (Code-projects), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-8236 | code-projects Online Ordering System edit_product.php sql injection | 7.3 | |
| Critical | CVE-2025-8235 | code-projects Online Ordering System product.php sql injection | 7.3 | |
| Critical | CVE-2025-8233 | code-projects Online Ordering System user.php sql injection | 7.3 | |
| Critical | CVE-2025-8232 | code-projects Online Ordering System delete_user.php sql injection | 7.3 | |
| Critical | CVE-2025-8234 | code-projects Online Ordering System delete_member.php sql injection | 7.3 | |
| Critical | CVE-2025-8248 | code-projects Online Ordering System signup.php sql injection | 7.3 | |
| Critical | CVE-2025-14251 | code-projects Online Ordering System Admin Login admin sql injection | 7.3 | |
| Critical | CVE-2025-14250 | code-projects Online Ordering System user_contact.php sql injection | 7.3 | |
| Critical | CVE-2025-14249 | code-projects Online Ordering System user_school.php sql injection | 7.3 | |
| High | CVE-2025-7755 | code-projects Online Ordering System edit_product.php unrestricted upload | 6.3 | |
| Critical | CVE-2025-8256 | code-projects Online Ordering System product.php unrestricted upload | 6.3 |