CVE-2025-12336

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0

Description A flaw exists in Campcodes Retro Basketball Shoes Online Store 1.0 related to the file /admin/admin index.php. Manipulation of the Username argument can lead to a SQL injection. The attack can be launched remotely. The exploit is publicly available.

Recommendations Apply a fix to address the SQL injection issue in the /admin/admin index.php file. As a temporary workaround, restrict access to the /admin/admin index.php file to minimize the risk of exploitation.