A vulnerability marked as critical has been reported in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulation of the argument ID causes sql injection.
This vulnerability is registered as CVE-2025-15167. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
