CVE-2025-4193itsourcecode Restaurant Management System category_update.php sql injection

Descripción

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/category_update.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• VDB-306806 | itsourcecode Restaurant Management System category_update.php sql injection vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-306806 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #561849 | itsourcecode Restaurant Management System V1.0 SQL Injection third-party-advisoryThird Party AdvisoryVDB Entry
• https://github.com/ARPANET-cybersecurity/vuldb/issues/5 exploitissue-trackingExploitIssue Tracking
• https://itsourcecode.com/ productProduct
• https://github.com/XuepengZhao-insp/vuldb/issues/5 ExploitIssue TrackingThird Party Advisory