SQL Injection Vulnerability in PuneethReddyHC Online Shopping System
CVE-2025-52021
9.8CRITICAL
What is CVE-2025-52021?
A SQL Injection vulnerability exists in the edit_product.php file of the PuneethReddyHC Online Shopping System Advanced 1.0. The vulnerability arises from the improper handling of user input through the product_id GET parameter, which is passed directly into a SQL query without adequate validation or parameterization. This flaw could allow an attacker to manipulate the SQL queries executed by the application, potentially leading to unauthorized access to sensitive data or administrative functionality.