CVE-2025-15074 in Online Frozen Foods Ordering System

Riassunto

di MITRE • 25/12/2025

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customer_details.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: VulDB
• Divulgazione: 25/12/2025
• Moderazione: accettato
• Voce: VDB-338331
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.8 (NVD)
• EPSS: 0.00429
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-15074
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-15074
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-15074/