CVE-2025-4549

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
Campcodes	Online Food Ordering System	1.0

References

https://github.com/jhs1121/cve/issues/3Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.308296Permissions Required, VDB Entry
https://vuldb.com/?id.308296Third Party Advisory, VDB Entry
https://vuldb.com/?submit.567549Third Party Advisory, VDB Entry
https://www.campcodes.com/Product
https://github.com/jhs1121/cve/issues/3Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: May 11, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-454909.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the passwo CVE-2025-454919.8Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the userna CVE-2025-454929.8Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function.CVE-2025-454936.5Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.CVE-2025-45509.8A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects CVE-2025-45515.4A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /CVE-2025-455126.5A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install craft CVE-2025-455139.8Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.CVE-2025-455146.5Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.CVE-2025-45528.1A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown fun CVE-2025-455252.9A NULL pointer dereference vulnerability has been identified in the JavaScript library microlight version 0.0.7, a lightweight syntax highli CVE-2025-455262.9A denial of service (DoS) vulnerability has been identified in the JavaScript library microlight version 0.0.7. This library, used for synta