CVE-2025-14248: code-projects Simple Shopping Cart adminlogin.php sql injection
A vulnerability was identified in code-projects Simple Shopping Cart 1.0. Impacted is an unknown function of the file /adminlogin.php. The manipulation of the argument adminusername leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14248?
CVE-2025-14248 has been classified as a high-severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-14248?
To fix CVE-2025-14248, you should validate and sanitize user inputs, particularly the admin_username parameter, to prevent SQL injection.
Which software is affected by CVE-2025-14248?
CVE-2025-14248 affects the Code-projects Simple Shopping Cart version 1.0.
Can CVE-2025-14248 be exploited remotely?
Yes, CVE-2025-14248 can be exploited remotely through the vulnerable adminlogin.php file.
What kind of attack does CVE-2025-14248 enable?
CVE-2025-14248 enables an SQL injection attack, allowing unauthorized access to the database.