CVE-2025-7411: code-projects LifeStyle Store success.php sql injection

Published Jul 10, 2025

Updated

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /success.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects LifeStyle Store

Anisha Lifestyle Store=1.0

Event History

Jul 10, 2025

CVE Published

via MITRE·07:02 PM

Data Sourced

via MITRE·07:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Jun 13, 58473

Event

via NVD·01:45 PM

Frequently Asked Questions

What is the severity of CVE-2025-7411?

CVE-2025-7411 has been declared as critical due to its potential for remote exploitation.

How does CVE-2025-7411 affect users?

CVE-2025-7411 allows for SQL injection through the manipulation of the ID parameter in the file /success.php.

How do I fix CVE-2025-7411?

To fix CVE-2025-7411, sanitize and validate all user inputs, especially the ID parameter, to prevent SQL injection.

Can CVE-2025-7411 be exploited remotely?

Yes, CVE-2025-7411 can be exploited remotely, allowing attackers to execute malicious SQL commands.

Which software versions are affected by CVE-2025-7411?

CVE-2025-7411 affects version 1.0 of the Code-projects LifeStyle Store.