Security Advisory
CVE-2025-61455
9.8
CRITICAL
Vulnerability Description
SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint. The application directly incorporates unsanitized user inputs into SQL queries, allowing unauthenticated attackers to bypass authentication and gain full access.
Published Date
October 20, 2025
Official Source
NIST NVD Advisory