A vulnerability identified as critical has been detected in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Create_product.php. Performing manipulation of the argument dre_title results in sql injection.
This vulnerability is reported as CVE-2025-15408. The attack is possible to be carried out remotely. Moreover, an exploit is present.
