A vulnerability, which was classified as critical, was found in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection.
This vulnerability is referenced as CVE-2025-13451. It is possible to launch the attack remotely. Furthermore, an exploit is available.
