CVE-2025-6305: code-projects Online Shoe Store admin_feature.php sql injection
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminfeature.php. The manipulation of the argument productcode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6305?
CVE-2025-6305 has been classified as a critical severity vulnerability.
What type of vulnerability is CVE-2025-6305?
CVE-2025-6305 is an SQL injection vulnerability affecting the Online Shoe Store application.
Where is CVE-2025-6305 located in the software?
CVE-2025-6305 is found in the /admin/admin_feature.php file of the Online Shoe Store application.
How does CVE-2025-6305 affect the Online Shoe Store application?
CVE-2025-6305 allows remote attackers to manipulate the product_code argument, leading to SQL injection.
How can I mitigate CVE-2025-6305?
To mitigate CVE-2025-6305, ensure input validation and use prepared statements to prevent SQL injection.