CVE-2025-61455 – Bhabishya-123 E-commerce SQL Injection

CVE ID : CVE-2025-61455

Published : Oct. 20, 2025, 2:15 p.m. | 26 minutes ago

Description : SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint. The application directly incorporates unsanitized user inputs into SQL queries, allowing unauthenticated attackers to bypass authentication and gain full access.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…