CNNVD-202601-020 Information

CNNVD ID

CNNVD-202601-020

CVE-2025-15407

  • CNNVD Published: 2026-01-01

Description (Chinese)

Code-Projects Online Guitar Store是Code-Projects开源的一个在线吉他商店。 code-projects Online Guitar Store 1.0版本存在SQL注入漏洞,该漏洞源于文件/admin/Create_category.php中对参数dre_Ctitle的错误操作,可能导致SQL注入。

Description (English)

Code-Projects Online Guitar Store is an online guitar store open to Code-Projects. Version 1.0 of code-projects Online Guitar Store contains an injection loophole in SQL, which stems from the error in dre Ctitle of the parameter in the document/admin/Create Category.php and may result in SQL injection.

Hazard Level

Medium

Vulnerability Type

SQL注入

Affected Vendor

Code-Projects

Published

2026-01-01

Last Modified

2026-02-24

References

https://code-projects.org/ https://github.com/jjjjj-zr/jjjjjzr19/issues/1 https://vuldb.com/?ctiid.339327 https://vuldb.com/?id.339327 https://vuldb.com/?submit.728391

Share on: