A vulnerability was found in code-projects Mobile Shop Management System 1.0. It has been declared as critical. This affects an unknown part of the file /ExLogin.php. Executing a manipulation of the argument Password can lead to sql injection.

This vulnerability appears as CVE-2025-69563. The attack may be performed from remote. There is no available exploit.