CVE-2025-13451: SourceCodester Online Shop Project action.php sql injection
Published Nov 20, 2025
·Updated
A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
2 affected components
Sourcecodester Online Shop Project
oretnom23 Online Shop Project=1.0
Event History
Nov 20, 2025
CVE Published
via MITRE·03:02 AM
Data Sourced
via MITRE·03:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-13451?
CVE-2025-13451 is a high-severity vulnerability due to its potential for remote SQL injection exploitation.
2
How do I fix CVE-2025-13451?
To fix CVE-2025-13451, sanitize and validate all user inputs in the /action.php file to prevent SQL injection.
3
What systems are affected by CVE-2025-13451?
CVE-2025-13451 affects SourceCodester Online Shop Project version 1.0.
4
Can CVE-2025-13451 be exploited remotely?
Yes, CVE-2025-13451 can be exploited remotely, allowing attackers to manipulate SQL queries.
5
What type of vulnerability is CVE-2025-13451?
CVE-2025-13451 is classified as an SQL injection vulnerability.