CVE-2025-61246

indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/reviewaction.php via the proId parameter...

CVE-2025-61246

The indieka900 online-shopping-system-php version 1.0 is vulnerable to a SQL Injection in the master/review_action.php file. The root cause is the improper sanitization of the proId parameter, which is directly concatenated into SQL queries. This allows unauthenticated attackers to perform time-b...