A vulnerability has been found in projectworlds Online Ordering Food System 1.0 and classified as critical. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection.
This vulnerability is registered as CVE-2025-11604. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
