Critical severity · published Jul 12, 2023
CVE-2023-37627
Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OR
Online Restaurant Management System · Code-projects
1.0 · source: NVD
Affected product
OR
Online Restaurant Management System
Code-projects
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-37627
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-37627
Product
https://code-projects.org/online-restaurant-management-system-in-php-with-source-code/
Exploit
https://gist.github.com/1337kid/d3e7702bd19cc9355a6b3f153eb2fe8e
More from Online Restaurant Management System
9.8
CVE-2025-3345
A vulnerability was found in codeprojects Online Restaurant Management System 1.0
9.8
CVE-2025-3344
A vulnerability was found in codeprojects Online Restaurant Management System 1.0
9.8
CVE-2025-3343
A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical
9.8
CVE-2025-3342
A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical
9.8
CVE-2025-3341
A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0