CVE-2020-25905

CVE-2020-25905 is an SQL injection vulnerability in Sourcecodester Mobile Shop System v1.0 (PHP/MySQL) exploitable via the email parameter in login.php and LoginAsAdmin.php. The issue, confirmed by multiple sources, allows attacker-controlled SQL execution with network access and no authenticatio...