CVE-2025-61455

A critical SQL Injection vulnerability (CVSS 9.8) exists in Bhabishya-123 E-commerce v1.0 within the signup.inc.php endpoint. The application fails to sanitize user inputs, specifically the email parameter, directly incorporating them into SQL queries. This allows unauthenticated attackers to per...