A vulnerability labeled as critical has been found in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Delete_product.php. Executing manipulation of the argument del_pro can lead to sql injection.

This vulnerability appears as CVE-2025-15409. The attack may be performed from remote. In addition, an exploit is available.