Indieka900 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Indieka900 CVE published 2026-01-08

CVE-2025-61246

A critical SQL Injection vulnerability exists in indieka900 online-shopping-system-php 1.0, specifically in the master/review_action.php file via the proId parameter. This vulnerability has a CVSS score of 9.8 and is considered critical. The vulnerability allows attackers to inject malicious SQL code, potentially leading to unauthorized data access or modification, disruption of online shopping services, [truncated]