CVE-2025-11604

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/Duo-zhen/CVE/issues/4Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.327926Permissions Required, VDB Entry
• https://vuldb.com/?id.327926Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.671979Third Party Advisory, VDB Entry
• https://github.com/Duo-zhen/CVE/issues/4Exploit, Issue Tracking, Third Party Advisory

Published

Oct 11, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11599A weakness has been identified in Campcodes Online Apartment…9.8
• CVE-2025-1160A vulnerability was found in SourceCodester Employee Managem…9.8
• CVE-2025-11600A security vulnerability has been detected in code-projects …8.8
• CVE-2025-11601A vulnerability was detected in SourceCodester Online Studen…9.8
• CVE-2025-11602Potential information leak in bolt protocol handshake in Neo…6.3
• CVE-2025-11603A vulnerability was found in code-projects Simple Food Order…8.8
• CVE-2025-11605A vulnerability was identified in code-projects Client Detai…8.8
• CVE-2025-11606A security flaw has been discovered in iPynch Social Network…6.3
• CVE-2025-11607A weakness has been identified in harry0703 MoneyPrinterTurb…8.8
• CVE-2025-11608A security vulnerability has been detected in code-projects …9.8
• CVE-2025-11609A flaw has been found in code-projects Hospital Management S…8.1
• CVE-2025-1161Incorrect Use of Privileged APIs vulnerability in NomySoft I…7.1