CVE-2025-6472: code-projects Online Bidding System showprod.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Online Bidding System 1.0. Affected by this issue is some unknown functionality of the file /showprod.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6472?
CVE-2025-6472 is classified as critical due to the potential for SQL injection attacks.
How do I fix CVE-2025-6472?
To fix CVE-2025-6472, ensure proper input validation and sanitization for the 'ID' parameter in /showprod.php.
What type of attack can be executed due to CVE-2025-6472?
CVE-2025-6472 allows for remote SQL injection attacks that can compromise database security.
Which software is affected by CVE-2025-6472?
CVE-2025-6472 affects the Online Bidding System version 1.0 developed by code-projects.
Is exploitation of CVE-2025-6472 easy?
Exploitation of CVE-2025-6472 can be executed remotely and may require minimal technical knowledge.