CVE-2025-13323

Published November 18th, 2025

View on NVD ↗

CVSS v3

7.3

HIGH

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

daojian1/Simple-Pizza-Ordering-System_V1.0_003

Simple Pizza Ordering System V1.0 listorder.php SQL injection

GitHub