CVE-2025-61455

Name of the Vulnerable Software and Affected Versions Bhabishya-123 E-commerce version 1.0

Description A SQL Injection issue exists in Bhabishya-123 E-commerce. The application incorporates unsanitized user inputs directly into SQL queries. This allows unauthenticated attackers to bypass authentication and gain full access. The vulnerability is present in the signup.inc.php endpoint and the https://t.co/ox4NNwmsS5.php endpoint. The signup.inc.php endpoint directly incorporates unsanitized user inputs into SQL queries.

Recommendations Sanitize all user inputs before incorporating them into SQL queries in the signup.inc.php endpoint. Sanitize all user inputs before incorporating them into SQL queries in the https://t.co/ox4NNwmsS5.php endpoint.