Security Advisory

CVE-2025-51968

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-28 00:00:00
Last updated 2025-08-28 20:00:02
Assigner mitre
State PUBLISHED

Description

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions.