CVE-2025-61246
Critical · 9.8CVSS
9.8
EPSS
0.4%
Published
Jan 8, 2026
CISA due date
—
The record
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the proId parameter.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|