PT-2025-44066
CVE-2025-12336
·
Publicado
2025-10-28
·
Atualizado
2026-10-17
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Campcodes Retro Basketball Shoes Online Store version 1.0
Description
A flaw exists in Campcodes Retro Basketball Shoes Online Store 1.0 related to the file
/admin/admin index.php. Manipulation of the Username argument can lead to a SQL injection. The attack can be launched remotely. The exploit is publicly available.Recommendations
Apply a fix to address the SQL injection issue in the
/admin/admin index.php file. As a temporary workaround, restrict access to the /admin/admin index.php file to minimize the risk of exploitation.Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾