CVE-2025-4865

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
itsourcecode	Restaurant Management System	1.0

References

https://github.com/swws141/CVE/issues/2Exploit, Issue Tracking, Third Party Advisory
https://itsourcecode.com/Product
https://vuldb.com/?ctiid.309407Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.309407Third Party Advisory, VDB Entry
https://vuldb.com/?submit.575466Third Party Advisory, VDB Entry
https://github.com/swws141/CVE/issues/2Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: May 18, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-486508.4In multiple locations, there is a possible information disclosure due to SQL injection. This could lead to local escalation of privilege wit CVE-2025-486515.5In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validatio CVE-2025-486527.8In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This coul CVE-2025-486538.4In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due to a logic error in the code. This could CVE-2025-486547.8In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to l CVE-2025-48668.8A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component CVE-2025-48676.5A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function form CVE-2025-48686.3A vulnerability was found in merikbest ecommerce-spring-reactjs up to 464e610bb11cc2619cf6ce8212ccc2d1fd4277fd. It has been rated as critica CVE-2025-48699.8A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the CVE-2025-486956.4An issue was discovered in CyberDAVA before 1.1.20. A privilege escalation vulnerability allows a low-privileged user to escalate their priv CVE-2025-48709.8A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. This vulnerability affects unknown code o CVE-2025-487006.1An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zi