PT-2025-43973 · Indieka900 · Online Shopping System

Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-61247

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions indieka900 online-shopping-system-php version 1.0

Description The online-shopping-system-php software version 1.0 contains a SQL Injection issue in the password parameter of the 'login.php' file. This allows for potential unauthorized access or data manipulation. The vulnerable parameter is password within the ''login.php'' API endpoint.

Recommendations Apply input validation and sanitization to the password parameter in the 'login.php' file to prevent SQL Injection attacks.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-61247

Affected Products

Online Shopping System

References · 5

• 🔥 https://github.com/suyashksawant/CVEs/blob/main/CVE-2025-61247%3A%20SQL%20Injection%20in%20Online%20Shopping%20System · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-61247 · Security Note
• https://twitter.com/CVEnew/status/1982833320317661240 · Twitter Post
• https://t.me/CVEtracker/35858 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1982946812353720776 · Twitter Post