CVE-2025-3330: High SQL Injection in Online Restaurant Management System
CVE-2025-3330 is a High (7.3) SQL injection in Online Restaurant Management System 1.0. No fix is confirmed; use prepared statements and restrict access.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-3330 is a High (7.3) SQL injection in Online Restaurant Management System 1.0. No fix is confirmed; use prepared statements and restrict access.
CVE-2025-3320 is a High (8.1) heap overflow in IBM Tivoli Monitoring up to SP20. Upgrade to 6.3.0.7-TIV-ITM-SP0021; IBM lists no workaround.
IBM Spectrum Protect Server 8.1 through 8.1.26 can allow authentication bypass through improper sessions (CVSS 8.1). Upgrade to 8.1.27; no workaround.
Men Salon Management System 1.0 has SQL injection in search-invoices.php (CVSS 7.3). No fix is named in the record, so restrict access and fix the query.
Apartment Visitor Management System 1.0 has SQL injection in view-report.php (CVSS 7.3). No fix is named; restrict access and fix the query now.
Apartment Visitor Management System 1.0 has SQL injection in forgotpw.php (CVSS 7.3). No fix is named in the record, so restrict access and fix the query.
Men Salon Management System 1.0 has SQL injection in add-customer.php (CVSS 7.3). No fix is named in the record, so restrict access and fix the query.
Men Salon Management System 1.0 has SQL injection in add-customer-services.php via sids[] (CVSS 7.3). No fix named; restrict access and fix the query.
Men Salon Management System 1.0 has SQL injection in about-us.php (CVSS 7.3). No fix is named in the record, so restrict access and fix the query.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.