CVE-2020-25905

9.8 criticalEPSS 1.7%

Critical (9.8) in mobile shop system project mobile shop system. EPSS 1.7% chance of exploitation in the next 30 days.

An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in (1) login.php or (2) LoginAsAdmin.php.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-01-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mobile_shop_system_project:mobile_shop_system

References

https://packetstormsecurity.com/files/159132/Mobile-Shop-System-1.0-SQL-Injection.html
https://www.exploit-db.com/exploits/48916
https://packetstormsecurity.com/files/159132/Mobile-Shop-System-1.0-SQL-Injection.html
https://www.exploit-db.com/exploits/48916

Check your stack JSON