ORETNOM23 Simple Cafe Billing System vulnerabilities

2 CVEs affecting ORETNOM23 Simple Cafe Billing System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9702, published 2025-08-30.

More from ORETNOM23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-9702, published 2025-08-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /sales_report.php. The manipulation of the argument month leads to sql…
• CVE-2025-9701, published 2025-08-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. The impacted element is an unknown function of the file /receipt.php. Executing manipulation of the argument ID can…