High severity7.7NVD Advisory· Published Jul 29, 2025· Updated Jun 17, 2026
CVE-2025-51970
CVE-2025-51970
Description
A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- PuneethReddyHC/Online Shopping System Advanceddescription
- Range: 1.0
Patches
Vulnerability mechanics
References
2- gist.github.com/im4x/10738ee219d69024387737fb14cdba9fnvdExploitThird Party Advisory
- github.com/jairajparyani/CVE-s/blob/main/CVE-2025-51970%20%E2%80%93%20SQL%20Injection%20Vulnerability%20in%20Online%20Shopping%20System%20AdvancednvdExploitMitigationThird Party Advisory
News mentions
0No linked articles in our index yet.