CNNVD-202601-014 Information

CNNVD ID

CNNVD-202601-014

CVE-2025-15409

  • CNNVD Published: 2026-01-01

Description (Chinese)

Code-Projects Online Guitar Store是Code-Projects开源的一个在线吉他商店。 Code-Projects Online Guitar Store 1.0版本存在SQL注入漏洞,该漏洞源于文件/admin/Delete_product.php中对参数del_pro的错误操作,可能导致SQL注入。

Description (English)

Code-Projects Online Guitar Store is an online guitar store open to Code-Projects. The Code-Projects Online Guitar Store Version 1.0 contains an injection loophole in SQL, which stems from the error in the file/admin/Delete project.php in the parameter del pro, which may result in SQL injection.

Hazard Level

Low

Vulnerability Type

SQL注入

Affected Vendor

Code-Projects

Published

2026-01-01

Last Modified

2026-02-24

References

https://code-projects.org/ https://vuldb.com/?submit.728393 https://github.com/jjjjj-zr/jjjjjzr19/issues/3 https://vuldb.com/?id.339329 https://vuldb.com/?ctiid.339329 https://access.redhat.com/security/cve/cve-2025-15409

Share on: