CVE-2025-6304: code-projects Online Shoe Store cart.php sql injection
A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /cart.php. The manipulation of the argument qty[] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6304?
CVE-2025-6304 is classified as a critical vulnerability.
How do I fix CVE-2025-6304?
To fix CVE-2025-6304, sanitize and validate all inputs received in the /cart.php file to prevent SQL injection.
What are the potential impacts of CVE-2025-6304?
The exploitation of CVE-2025-6304 can lead to unauthorized remote access to the database and potential data breaches.
Who is affected by CVE-2025-6304?
CVE-2025-6304 affects users of the Online Shoe Store version 1.0 by Code-projects.
How can I test if my application is vulnerable to CVE-2025-6304?
You can test for CVE-2025-6304 by attempting to manipulate the qty[] parameter in the /cart.php file to check if SQL injection is possible.