A vulnerability classified as critical was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection.
This vulnerability was named CVE-2025-13449. The attack may be performed from remote. In addition, an exploit is available.
