CVE-2025-14091

The CVE-2025-14091 entry concerns TrippWasTaken PHP-Guitar-Shop, specifically the Product Details Page component. The issue is a SQL injection caused by manipulation of the ID argument in /product.php, exploitable remotely and with the exploit publicly available. Affected versions are those prior...

CVE-2025-14091 TrippWasTaken PHP-Guitar-Shop Product Details product.php sql injection

A weakness has been identified in TrippWasTaken PHP-Guitar-Shop up to 6ce0868889617c1975982aae6df8e49555d0d555. This vulnerability affects unknown code of the file /product.php of the component Product Details Page. Executing manipulation of the argument ID can lead to sql injection. It is possib...