CVE-2025-6484: code-projects Online Shopping Store action.php sql injection
A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6484?
CVE-2025-6484 is classified as a critical vulnerability.
How do I fix CVE-2025-6484?
To fix CVE-2025-6484, ensure proper input validation and prepared statements in your database queries to prevent SQL injection.
What are the impacted components of CVE-2025-6484?
CVE-2025-6484 affects the file /action.php in the Online Shopping Store 1.0 application.
What kind of attack does CVE-2025-6484 facilitate?
CVE-2025-6484 facilitates SQL Injection attacks through manipulation of arguments like cat_id, brand_id, keyword, and others.
Which software is vulnerable to CVE-2025-6484?
The vulnerable software associated with CVE-2025-6484 is code-projects Online Shopping Store version 1.0.