【中文导读】该 CVE 涉及SQL 注入、认证绕过（严重风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint. The application directly incorporates unsanitized user inputs into SQL queries, allowing unauthenticated attackers to bypass authentication and gain full access.