CVE Catalog
CVE-2025-65336
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.32%
25th percentile - higher than 25% of all known CVEs
Summary
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL injection in /show_price_by_pdtId.php. An attacker can exploit this flaw to execute unauthorized database queries.
Risk Assessment
Risk includes potential leakage of product data and the ability to modify or delete database records.
Recommendation
Immediately update the system or use parameterized SQL queries to prevent injection.
Original NVD description (English source)
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.