CVE-2025-61548 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop…
Critical CVSS: 9.8

CVE-2025-61548

SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 (fixed in 19.69). Unsanitized user input is incorporated directly into SQL queries without proper parameterization or escaping. This vulnerability allows remote attackers to execute arbitrary SQL commands
Vendor
Edubusinesssolutions
Product
Print Shop Pro Webdesk
CWE
CWE-89
Yayın Tarihi
2026-01-08 17:15:48
Güncelleme
2026-02-10 18:16:20
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-89 Print Shop Pro Webdesk CRITICAL Edubusinesssolutions 2026

Referanslar

https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2025-61548 https://github.com/chndlrx/vulnerability-disclosures/tree/main/CVE-2025-61548