CVE-2025-69563: SQL Injection
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69563?
CVE-2025-69563 is classified as a high-severity vulnerability due to its potential to allow unauthorized access to database contents.
How do I fix CVE-2025-69563?
To resolve CVE-2025-69563, sanitize and validate input parameters, especially the Password parameter in /ExLogin.php, to prevent SQL injection.
What is the impact of exploiting CVE-2025-69563?
Exploiting CVE-2025-69563 can lead to complete database compromise, allowing attackers to view, modify or delete data.
Which versions of Code-projects Mobile Shop Management System are affected by CVE-2025-69563?
CVE-2025-69563 affects version 1.0 of the Code-projects Mobile Shop Management System.
Is there a workaround for CVE-2025-69563?
A possible workaround for CVE-2025-69563 includes restricting database access permissions and implementing Web Application Firewall rules to block malicious input.