CVE-2025-14248

Name of the Vulnerable Software and Affected Versions code-projects Simple Shopping Cart version 1.0

Description A flaw exists in code-projects Simple Shopping Cart version 1.0 that allows for remote SQL injection. The issue is located in the file '/adminlogin.php', specifically through manipulation of the admin username argument within an unknown function. The exploit for this issue is publicly available.

Recommendations Apply any available updates or patches for code-projects Simple Shopping Cart version 1.0. As a temporary workaround, restrict access to the '/adminlogin.php' file. Sanitize the admin username input to prevent SQL injection attacks.