code-projects Simple Food Ordering System 1.0 /addcategory.php cname କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ
Dogoggorri kan akka ସମସ୍ୟାଜନକ jedhamuun ramadame code-projects Simple Food Ordering System 1.0 keessatti argameera. Miidhamni argame is hojii hin beekamne faayilii /addcategory.php keessa. Wanti jijjiirame irratti cname gara କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-79 si geessa. Odeeffannoon kun yeroo 10/26/2025 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti argama. Dogoggorri kun CVE-2025-12300 jedhamee waamama. Weerara fageenya irraa jalqabuu ni danda'ama. Ibsa teeknikaa ni jira. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Qorannoo miidhaa (exploit) uummataaf ifa taasifameera, kanaafis fayyadamuu ni danda'ama. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Exploit github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera. If you want to get best quality of vulnerability data, you may have to visit VulDB.
2 ଆଡାପ୍ଟେସନ୍ · 86 ପଏଣ୍ଟ
| ଫିଲ୍ଡ | ସୃଷ୍ଟି ହୋଇଛି 10/26/2025 06:04 PM | ଅଦ୍ୟତନ 1/1 10/28/2025 02:36 AM |
|---|---|---|
| source_cve | CVE-2025-12300 | CVE-2025-12300 |
| cna_responsible | VulDB | VulDB |
| software_type | Project Management Software | Project Management Software |
| cvss2_vuldb_av | N | N |
| cvss2_vuldb_ac | L | L |
| cvss2_vuldb_au | N | N |
| cvss2_vuldb_ci | N | N |
| cvss2_vuldb_ii | P | P |
| cvss2_vuldb_ai | N | N |
| cvss2_vuldb_e | POC | POC |
| cvss2_vuldb_rc | UR | UR |
| cvss4_vuldb_av | N | N |
| cvss4_vuldb_ac | L | L |
| cvss4_vuldb_pr | N | N |
| cvss4_vuldb_ui | P | P |
| cvss4_vuldb_vc | N | N |
| cvss4_vuldb_vi | L | L |
| cvss4_vuldb_va | N | N |
| cvss4_vuldb_e | P | P |
| cvss2_vuldb_rl | ND | ND |
| cvss3_vuldb_rl | X | X |
| cvss4_vuldb_at | N | N |
| cvss4_vuldb_sc | N | N |
| cvss4_vuldb_si | N | N |
| cvss4_vuldb_sa | N | N |
| cvss2_vuldb_basescore | 5.0 | 5.0 |
| cvss2_vuldb_tempscore | 4.3 | 4.3 |
| cvss3_vuldb_basescore | 4.3 | 4.3 |
| cvss3_vuldb_tempscore | 3.9 | 3.9 |
| cvss3_meta_basescore | 4.3 | 4.3 |
| cvss3_meta_tempscore | 3.9 | 4.1 |
| cvss4_vuldb_bscore | 5.3 | 5.3 |
| cvss4_vuldb_btscore | 2.1 | 2.1 |
| advisory_date | 1761429600 (10/26/2025) | 1761429600 (10/26/2025) |
| price_0day | $0-$5k | $0-$5k |
| software_vendor | code-projects | code-projects |
| software_name | Simple Food Ordering System | Simple Food Ordering System |
| software_version | 1.0 | 1.0 |
| software_file | /addcategory.php | /addcategory.php |
| software_argument | cname | cname |
| vulnerability_cwe | CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ) | CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ) |
| vulnerability_risk | 1 | 1 |
| cvss3_vuldb_av | N | N |
| cvss3_vuldb_ac | L | L |
| cvss3_vuldb_pr | N | N |
| cvss3_vuldb_ui | R | R |
| cvss3_vuldb_s | U | U |
| cvss3_vuldb_c | N | N |
| cvss3_vuldb_i | L | L |
| cvss3_vuldb_a | N | N |
| cvss3_vuldb_e | P | P |
| cvss3_vuldb_rc | R | R |
| advisory_url | https://github.com/underatted/CVE/issues/20 | https://github.com/underatted/CVE/issues/20 |
| exploit_availability | 1 | 1 |
| exploit_publicity | 1 | 1 |
| exploit_url | https://github.com/underatted/CVE/issues/20 | https://github.com/underatted/CVE/issues/20 |
| cve_nvd_summary | A weakness has been identified in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addcategory.php. This manipulation of the argument cname causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. | |
| cvss4_cna_av | N | |
| cvss4_cna_ac | L | |
| cvss4_cna_at | N | |
| cvss4_cna_pr | N | |
| cvss4_cna_ui | P | |
| cvss4_cna_vc | N | |
| cvss4_cna_vi | L | |
| cvss4_cna_va | N | |
| cvss4_cna_sc | N | |
| cvss4_cna_si | N | |
| cvss4_cna_sa | N | |
| cvss4_cna_bscore | 5.3 | |
| cvss3_cna_av | N | |
| cvss3_cna_ac | L | |
| cvss3_cna_pr | N | |
| cvss3_cna_ui | R | |
| cvss3_cna_s | U | |
| cvss3_cna_c | N | |
| cvss3_cna_i | L | |
| cvss3_cna_a | N | |
| cvss3_cna_basescore | 4.3 | |
| cvss2_cna_av | N | |
| cvss2_cna_ac | L | |
| cvss2_cna_au | N | |
| cvss2_cna_ci | N | |
| cvss2_cna_ii | P | |
| cvss2_cna_ai | N | |
| cvss2_cna_basescore | 5 |