What’s Vulnerable › Vulnerabilities

CVE-2025-14251: code-projects Online Ordering System Admin Login admin sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-08 · updated 2026-10-07
• Weakness: CWE-74

Description

A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Affected products

• code-projects Online Ordering System: 1.0

References

• https://code-projects.org/
• https://github.com/zzb1388/cve/issues/95
• https://vuldb.com/?ctiid.334761
• https://vuldb.com/?id.334761
• https://vuldb.com/?submit.702467
• https://github.com/zzb1388/cve/issues/95

Get alerted when CVE-2025-14251 or the next vulnerability affects your stack