CVE-2025-15409

HIGH

Anisha Online Guitar Store - Injection

Title source: rule

Description

A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Delete_product.php. Executing a manipulation of the argument del_pro can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0001
EPSS Percentile 1.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-74 CWE-89
Status published

Affected Products (1)

anisha/online_guitar_store

Timeline

Published Jan 01, 2026
Tracked Since Feb 18, 2026