CVE-2025-6820

🗓️ 28 Jun 2025 17:31:05Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 15 Views🌐 WEB

Critical SQL injection vulnerability in code-projects Inventory Management System createProduct.php exposed

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-6820	28 Jun 202517:53	–	circl
CNNVD	Code-Projects Inventory Management System 注入漏洞	28 Jun 202500:00	–	cnnvd
CNVD	Inventory Management System createProduct.php File SQL Injection Vulnerability	30 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-6820 code-projects Inventory Management System createProduct.php sql injection	28 Jun 202517:31	–	cvelist
EUVD	EUVD-2025-19454	3 Oct 202520:07	–	euvd
NVD	CVE-2025-6820	28 Jun 202518:15	–	nvd
OSV	CVE-2025-6820	28 Jun 202518:15	–	osv
Positive Technologies	PT-2025-27320 · Code Projects · Code-Projects Inventory Management System	28 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6820	30 Jun 202518:19	–	redhatcve
Vulnrichment	CVE-2025-6820 code-projects Inventory Management System createProduct.php sql injection	28 Jun 202517:31	–	vulnrichment

NVD

Vulners

Node

code-projects inventory_management_systemMatch1.0

[
  {
    "vendor": "code-projects",
    "product": "Inventory Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/AlbaDove/cve/issues/3
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
code-projects	www.code-projects.org/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
productName	request body	/php_action/createProduct.php	SQL injection vulnerability in createProduct.php via productName parameter.	CWE-74, CWE-89

29 Apr 2026 01:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.3 - 9.8

CVSS 46.9

CVSS 27.5

CVSS 37.3

EPSS0.00204

SSVC