CVE-2025-11600

published 2025-10-11

CVE-2025-11600: A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file editcategory.php. Such…

low 2.1 CVSS 4.0

AV N AC L AT N PR L UI N VC L VI L VA L SC N SI N SA N E P CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file editcategory.php. Such manipulation of the argument cname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
code-projects	simple_food_ordering_system	—	—
fabian	simple_food_ordering_system	—	—

CWE-74 CWE-89