CVE-2025-2951: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Bluestar Micro Mall 1.0. Affected is an unknown function of the file /api/data.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

PT-2025-13621

Name of the Vulnerable Software and Affected Versions Bluestar Micro Mall version 1.0 Description A critical issue has been discovered, affecting an unknown function of the file /api/data.php. The manipulation of the Search argument leads to sql injection. This issue can be exploited remotely...