CVE-2025-3333

CWE-74CWE-89 — SQL InjectionCWE-306 — Missing AuthenticationCWE-4076 documents6 sources
Severity
6.9MEDIUM
EPSS
0.2%
top 54.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Codeprojects Online Restaurant Management SystemCode-projects Online Restaurant Management System
Timeline
PublishedApr 7
Latest updateDec 2

Description

A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menu_update.php. The manipulation of the argument menu leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

3
GHSA
Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata↗2025-08-29
▶
CVEList
codeprojects Online Restaurant Management System menu_update.php sql injection↗2025-04-07
▶
GHSA
GHSA-9867-8p52-837m: A vulnerability has been found in codeprojects Online Restaurant Management System 1↗2025-04-07
▶

💥Exploits & PoCs

1
Metasploit
Eclipse Che machine-exec Unauthenticated RCE↗
▶

📋Vendor Advisories

1
Red Hat
github.com/che-incubator/che-code: Eclipse Che — unauthenticated RCE and secret exfiltration via TCP/3333↗2025-12-02
▶
CVE-2025-3333 (MEDIUM CVSS 6.9) | A vulnerability has been found in c | cvebase.io