PT-2025-43973 · Indieka900 · Online Shopping System

CVE-2025-61247

·

Publicado

2025-10-27

·

Atualizado

2025-10-27

CVSS v3.1

8.2

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Name of the Vulnerable Software and Affected Versions indieka900 online-shopping-system-php version 1.0
Description The online-shopping-system-php software version 1.0 contains a SQL Injection issue in the password parameter of the 'login.php' file. This allows for potential unauthorized access or data manipulation. The vulnerable parameter is password within the ''login.php'' API endpoint.
Recommendations Apply input validation and sanitization to the password parameter in the 'login.php' file to prevent SQL Injection attacks.

Exploit

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-61247

Produtos afetados

Online Shopping System