Security Advisory

CVE-2025-51626

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-09 00:00:00

Last updated 2026-01-09 21:20:33

Assigner mitre

State PUBLISHED

SQL injection vulnerability in pss.sale.com 1.0 via the id parameter to the userfiles/php/cancel_order.php endpoint.