A vulnerability has been found in indieka900 online-shopping-system-php 1.0 and classified as critical. Impacted is an unknown function of the file master/review_action.php. This manipulation of the argument proId causes sql injection.
This vulnerability is tracked as CVE-2025-61246. The attack is possible to be carried out remotely. No exploit exists.
