A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The product_id GET parameter is unsafely passed to a SQL query without proper validation or parameterization.
Metrics
Affected Vendors & Products
References
History
Tue, 07 Oct 2025 17:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The product_id GET parameter is unsafely passed to a SQL query without proper validation or parameterization. | |
References |
|

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-10-07T16:57:43.030Z
Reserved: 2025-06-16T00:00:00.000Z
Link: CVE-2025-52021

No data.

Status : Received
Published: 2025-10-07T17:15:33.570
Modified: 2025-10-07T17:15:33.570
Link: CVE-2025-52021

No data.

No data.