CVE-2025-69564: SQL Injection
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php via the Name, Address, email, UserName, Password, confirmpassword, Role, Branch, and Activate parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69564?
CVE-2025-69564 is classified as a high-severity vulnerability due to the potential for unauthorized database access.
How do I fix CVE-2025-69564?
To fix CVE-2025-69564, implement prepared statements or parameterized queries to prevent SQL injection.
What are the affected components in CVE-2025-69564?
CVE-2025-69564 affects the parameters in the /ExAddNewUser.php file, specifically Name, Address, email, UserName, Password, confirm_password, Role, Branch, and Activate.
What is SQL Injection related to CVE-2025-69564?
SQL Injection in the context of CVE-2025-69564 allows attackers to manipulate SQL queries by injecting malicious input through vulnerable parameters.
Is there a patch available for CVE-2025-69564?
As of now, there is no official patch available for CVE-2025-69564; the recommended mitigation is to secure the code against SQL injection.