CVE Catalog
CVE-2025-61246
CriticalSummary
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the proId parameter.
Risk Assessment
The risk includes the possibility of database manipulation, which can lead to data leakage, data modification, or full system compromise.
Recommendation
It is recommended to immediately implement input validation and parameterized SQL queries in master/review_action.php and update the system.
Original NVD description (English source)
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the proId parameter.