CVE-2025-1903

CVE-2025-1903 affects Codezips Online Shopping Website 1.0. The vulnerability allows SQL injection by manipulating the id argument in /cart_add.php and can be exploited remotely. Multiple sources (NVD, Red Hat, CVE registries) describe a critical impact with high confidentiality, integrity, and a...

CVE-2025-1858

Consolidated details from multiple sources confirm CVE-2025-1858 affects Codezips Online Shopping Website 1.0, with a SQL injection in the /success.php file triggered by manipulating the id parameter. Exploitation can be performed remotely, and public disclosures exist. No patch/version details o...