← Database

CVE-2025-14247

MEDIUM CVSS: 6.3 Published: 2025-12-08 Modified: 2026-06-17

Description

A vulnerability was determined in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of the file /Admin/additems.php. Executing manipulation of the argument item_name can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Fabian Simple Shopping Cart

Weakness Type

CWE-74, CWE-89, CWE-89

References