CVE-2025-15408: code-projects Online Guitar Store Create_product.php sql injection
A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Createproduct.php. Performing a manipulation of the argument dretitle results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15408?
CVE-2025-15408 is classified as a high-severity SQL injection vulnerability.
How do I fix CVE-2025-15408?
To fix CVE-2025-15408, you should sanitize and validate the input for the dre_title parameter in the Create_product.php file.
Can CVE-2025-15408 be exploited remotely?
Yes, CVE-2025-15408 can be exploited remotely by manipulating the dre_title argument.
Which software is affected by CVE-2025-15408?
CVE-2025-15408 affects the Code-projects Online Guitar Store version 1.0.
What type of vulnerability is CVE-2025-15408?
CVE-2025-15408 is a SQL injection vulnerability that allows unauthorized database access.