CVE-2025-12378 | code-projects Simple Food Ordering System 1.0 /addproduct.php photo unrestricted upload

October 28, 2025 Yanac

A vulnerability identified as critical has been detected in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addproduct.php. Performing manipulation of the argument photo results in unrestricted upload.

This vulnerability was named CVE-2025-12378. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More