{"id":"CVE-2025-3330","state":"PUBLISHED","title":"codeprojects Online Restaurant Management System reservation_save.php sql injection","description":"A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /reservation_save.php. The manipulation of the argument first leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.","publishedAt":"2025-04-07T01:31:04.868Z","updatedAt":"2025-04-07T13:51:26.222Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["codeprojects Online Restaurant Management System"],"affected":[{"vendor":"codeprojects","product":"Online Restaurant Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.303544","https://vuldb.com/?ctiid.303544","https://vuldb.com/?submit.551904","https://github.com/p1026/CVE/issues/44"],"weaknesses":["CWE-89","CWE-74"],"ingestedAt":"2026-10-29T20:09:09.358Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/3xxx/CVE-2025-3330.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-3330","state":"PUBLISHED","datePublished":"2025-04-07T01:31:04.868Z","dateUpdated":"2025-04-07T13:51:26.222Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-04-06T12:31:22.111Z"},"containers":{"cna":{"title":"codeprojects Online Restaurant Management System reservation_save.php sql injection","descriptions":[{"lang":"en","value":"A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /reservation_save.php. The manipulation of the argument first leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well."},{"lang":"de","value":"In codeprojects Online Restaurant Management System 1.0 wurde eine Schwachstelle entdeckt. Sie wurde als kritisch eingestuft. Hierbei betrifft es unbekannten Programmcode der Datei /reservation_save.php. Durch Beeinflussen des Arguments first mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"codeprojects","product":"Online Restaurant Management System","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.303544","name":"VDB-303544 | codeprojects Online Restaurant Management System reservation_save.php sql injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.303544","name":"VDB-303544 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.551904","name":"Submit #551904 | codeprojects Online Restaurant Management System 1.0 SQL Injection","tags":["third-party-advisory"]},{"url":"https://github.com/p1026/CVE/issues/44","tags":["exploit","issue-tracking"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","type":"CWE","lang":"en","description":"SQL Injection"}]},{"descriptions":[{"cweId":"CWE-74","type":"CWE","lang":"en","description":"Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-04-07T01:31:04.868Z"},"timeline":[{"time":"2025-04-06T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-04-06T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-04-06T14:37:44.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"p_key (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://github.com/p1026/CVE/issues/44","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-07T13:51:22.932218Z","id":"CVE-2025-3330","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-07T13:51:26.222Z"}}]}}}