CVE-2025-0205
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 4, 2025
Updated: Jan 22, 2025
CWE ID 89
CWE ID 74
Summary
CVE-2025-0205 is a critical vulnerability affecting the code-projects Online Shoe Store 1.0. This issue lies in an unidentified function of the /details2.php file, which can be exploited through SQL injection. Malicious actors can manipulate the id argument to execute malicious SQL queries, potentially gaining unauthorized access to sensitive data. Since the exploit has been made public, remote attacks are possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Online Shoe Store
Affected Vendors
- Code Projects