PT-2025-49554 · Unknown · Simple Php Shopping Cart

Zzb1 · Published 2025-12-08 · Updated 2025-12-09 · CVE-2025-14247

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simple Shopping Cart version 1.0

Description A flaw exists in the processing of the /Admin/additems.php file within Simple Shopping Cart. Manipulation of the item name argument can lead to SQL injection. This issue can be exploited remotely. The exploit has been publicly disclosed.

Recommendations Apply appropriate sanitization and validation to the item name parameter in the /Admin/additems.php file.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-14247

Affected Products

Simple Php Shopping Cart

References · 11

• 🔥 https://github.com/zzb1388/cve/issues/91 · Exploit
• https://osv.dev/vulnerability/CVE-2025-14247 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14247 · Security Note
• https://twitter.com/VulmonFeeds/status/1998039505656217922 · Twitter Post
• https://twitter.com/CVEnew/status/1998040898576482522 · Twitter Post
• https://t.me/CVEtracker/39123 · Telegram Post
• https://vuldb.com/?ctiid.334757 · Note
• https://vuldb.com/?submit.702463 · Note
• https://vuldb.com/?id.334757 · Note
• https://t.me/cveNotify/145238 · Telegram Post
• https://code-projects.org · Note