3 matches found
CVE-2025-61246
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/reviewaction.php via the proId parameter...
9.8CVSS5.9AI score0.00433EPSS
SaveExploits2References1
CVE-2025-61246
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/reviewaction.php via the proId parameter...
9.8CVSS0.00433EPSS
SaveExploits2References1
CVE-2025-61246
The indieka900 online-shopping-system-php version 1.0 is vulnerable to a SQL Injection in the master/review_action.php file. The root cause is the improper sanitization of the proId parameter, which is directly concatenated into SQL queries. This allows unauthenticated attackers to perform time-b...
9.8CVSS5.8AI score0.00433EPSS
SaveExploits2References1Affected Software1
20