CVE-2025-15166

Publication date

2025-12-29 01:32:07

Family

VulDB

State

PUBLISHED

Description

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.