Vulnerability Intelligence Report
itsourcecode Online Cake Ordering System updatesupplier.php sql injection
CVE-2025-15166
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
No Active Exploit Signals
CVSS Base Score
6.9
MEDIUM
EPSS Probability:0.33%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| itsourcecode | Online Cake Ordering System | 1.0 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.326%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | VulDB · Researcher · Switzerland |
| Reserved | 2025-12-27T23:11:18 |
| Published | 2025-12-29T01:32:07 |
| Last Updated | 2025-12-29T18:57:13 |
Community Chatter & Buzz