Unknown · Online Farm System · CVE-2025-15049
**Name of the Vulnerable Software and Affected Versions**
Online Farm System version 1.0
**Description**
A flaw exists in Online Farm System 1.0 that allows for SQL injection. The issue is located in the `/addProduct.php` file, specifically through manipulation of the `Username` argument. This allows for remote attacks. The exploit is publicly available.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.