CVE-2025-7607: code-projects Simple Shopping Cart save_order.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of the file /Customers/saveorder.php. The manipulation of the argument orderprice leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7607?
CVE-2025-7607 is classified as a critical vulnerability.
How do I fix CVE-2025-7607?
To fix CVE-2025-7607, sanitize all inputs to prevent SQL injection, particularly on the order_price argument in save_order.php.
What systems are affected by CVE-2025-7607?
CVE-2025-7607 affects versions of the Simple Shopping Cart software developed by code-projects.
What type of vulnerability is CVE-2025-7607?
CVE-2025-7607 is classified as an SQL injection vulnerability.
What is the potential impact of exploiting CVE-2025-7607?
Exploiting CVE-2025-7607 may allow attackers to manipulate the database, potentially leading to data loss or unauthorized access.