CVE-2025-5078

Summary

A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the file /admin/subcategory.php. Performing manipulation of the argument Category results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Affected Software

Weaknesses

• CWE-89: SQL Injection
• CWE-74: Injection

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://github.com/GeniusWang23/CVE/issues/2

References

• https://vuldb.com/?id.309958
• https://vuldb.com/?ctiid.309958
• https://vuldb.com/?submit.581432
• https://vuldb.com/?submit.641751
• https://github.com/GeniusWang23/CVE/issues/2

• ←Previous
• Next→