CVE-2020-25905

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p75

Published

Jan 28, 2022 (Jan 28, 2022)

Modified

Jun 17, 2026

Description

An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in (1) login.php or (2) LoginAsAdmin.php.

Vendors: mobile shop system project
Products: mobile shop system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.