A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The product_id GET parameter is unsafely passed to a SQL query without proper validation or parameterization.
History

Tue, 07 Oct 2025 17:00:00 +0000

Type Values Removed Values Added
Description A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The product_id GET parameter is unsafely passed to a SQL query without proper validation or parameterization.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-10-07T16:57:43.030Z

Reserved: 2025-06-16T00:00:00.000Z

Link: CVE-2025-52021

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-10-07T17:15:33.570

Modified: 2025-10-07T17:15:33.570

Link: CVE-2025-52021

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.