PT-2026-4967 · Code Projects · Mobile Shop Management System
CVE-2025-69564
·
Publicado
2026-01-27
·
Atualizado
2026-02-02
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
code-projects Mobile Shop Management System version 1.0
Description
The software contains a SQL Injection flaw in the '/ExAddNewUser.php' component. The following parameters are susceptible:
Name, Address, email, UserName, Password, confirm password, Role, Branch, and Activate. This allows for potential unauthorized access or manipulation of the database.Recommendations
Apply input validation and parameterized queries to the '/ExAddNewUser.php' component to prevent SQL Injection attacks. Sanitize the
Name, Address, email, UserName, Password, confirm password, Role, Branch, and Activate parameters before using them in database queries.Exploit
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Mobile Shop Management System