CVE-2025-6317

Name of the Vulnerable Software and Affected Versions code-projects Online Shoe Store version 1.0

Description A critical issue has been discovered in the /admin/confirm.php file, where manipulation of the ID argument leads to SQL injection. This can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Recommendations For code-projects Online Shoe Store version 1.0, consider disabling access to the /admin/confirm.php file until a patch is available to prevent SQL injection attacks. Restrict the manipulation of the ID argument to minimize the risk of exploitation.