CVE-2025-3018
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 31, 2025
Updated: Apr 7, 2025
CWE ID 89
CWE ID 74
Summary
CVE-2025-3018 is a critical vulnerability affecting the SourceCodester Online Eyewear Shop 1.0. This issue is tied to an unidentified function within the /classes/Users.php?f=delete file. Manipulation of the ID argument triggers a SQL injection vulnerability, posing a threat for remote attacks. The exploit for this weakness has been made public, increasing the risk for potential misuse.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.