CVE-2025-61246

Published January 8th, 2026

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the proId parameter.

hackergovind/CVE-2025-61246

CVE-2025-61246: SQL Injection vulnerability PoC in Online Shopping System PHP

GitHub