CVE-2025-13449: code-projects Online Shop Project login.php sql injection
A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13449?
The severity of CVE-2025-13449 is considered high due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-13449?
To fix CVE-2025-13449, sanitize and validate user inputs in the /login.php file to prevent SQL injection.
What are the potential impacts of exploiting CVE-2025-13449?
Exploiting CVE-2025-13449 can lead to unauthorized access to the database, data leakage, or manipulation of sensitive information.
Which versions of the Online Shop Project are affected by CVE-2025-13449?
CVE-2025-13449 affects version 1.0 of the code-projects Online Shop Project.
Is there a public exploit available for CVE-2025-13449?
Yes, the exploit for CVE-2025-13449 has been made public and can be leveraged by attackers.