CVE-2025-3338

Summary

CVE-2025-3338 is a newly disclosed critical vulnerability in the Codeprojects Online Restaurant Management System version 1.0. An unknown function in the file /admin/user_save.php is susceptible to SQL injection, allowing attackers to manipulate the 'Name' argument and potentially launch remote attacks. The exploit for this vulnerability has been made public, increasing the risk of exploitation. It is important to note that other parameters could also be affected. System administrators are urged to apply patches or updates as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.