SQL Injection Vulnerability in Bhabishya-123 E-commerce by Tansique
CVE-2025-61455
9.8CRITICAL
Key Information:
- Vendor
Tansique
- Status
- Vendor
- CVE Published:
- 20 October 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-61455?
An SQL injection vulnerability exists in Bhabishya-123 E-commerce version 1.0, particularly within the signup.inc.php endpoint. This flaw arises from the application’s incorporation of unsanitized user inputs directly into SQL queries. This oversight enables unauthenticated attackers to execute arbitrary SQL commands, which may result in bypassing authentication mechanisms and performing unauthorized actions within the system.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.