CVE-2025-14246: code-projects Simple Shopping Cart settings.php sql injection
A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file /Customers/settings.php. Performing manipulation of the argument userid results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14246?
CVE-2025-14246 has a high severity due to its potential for SQL injection exploitation.
How do I fix CVE-2025-14246?
To fix CVE-2025-14246, validate and sanitize user input before using it in SQL queries to prevent injection.
Which software is affected by CVE-2025-14246?
CVE-2025-14246 affects version 1.0 of the Code-projects Simple Shopping Cart application.
What type of attack does CVE-2025-14246 allow?
CVE-2025-14246 allows for remote SQL injection attacks via manipulation of the user_id argument.
Can CVE-2025-14246 be exploited remotely?
Yes, CVE-2025-14246 can be exploited remotely, making it a critical vulnerability to address.