CVE-2025-13449

Name of the Vulnerable Software and Affected Versions code-projects Online Shop Project version 1.0

Description A flaw exists in the processing of the /login.php file within the software. Manipulating the Password argument can lead to a SQL injection. This issue is remotely exploitable and details about the exploit are publicly available.

Recommendations Apply any available updates to address the SQL injection issue in the /login.php file. As a temporary workaround, sanitize the Password argument to prevent SQL injection attacks. Restrict access to the /login.php file to minimize the risk of exploitation.