CVE-2025-6611

CVE-2025-6611 affects code-projects’ Inventory Management System 1.0. The vulnerability lies in the file /php_action/createBrand.php where the brandStatus parameter is susceptible to SQL injection. Exploitation can be performed remotely and public exploits exist. The issue is documented across mu...

CVE-2025-6611 code-projects Inventory Management System createBrand.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/createBrand.php. The manipulation of the argument brandStatus leads to sql injection. The attack can be initiated remotely...

CVE-2025-6503

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/fetchSelectedCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated...

CVE-2025-6502

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /phpaction/changePassword.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-6500

A vulnerability, which was classified as critical, has been found in code-projects Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /phpaction/editCategories.php. The manipulation of the argument editCategoriesName leads to sql injection. The attac...

Code-Projects Inventory Management System Injection Vulnerabilities

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter brandStatus of file /phpaction/createBrand.php. An attacker can...

Code-Projects Inventory Management System Injection Vulnerabilities

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the categoriesId parameter of file /phpaction/removeCategories.php. An attacker c...

PT-2025-26908 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been found in the code-projects Inventory Management System. The problem affects the /php action/fetchSelectedBrand.php file, where the manipulation of th...

CVE-2025-6668: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /phpaction/fetchSelectedBrand.php. The manipulation of the argument brandId leads to sql injection. It is possible to initiate the attack...

PT-2025-26843 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been identified, affecting the file /php action/createBrand.php. The manipulation of the brandStatus argument leads to SQL injection. This issue can be...

PT-2025-26844 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects the processing of the file /php action/removeCategories.php, where the manipulation of the categoriesId argument leads to SQL injection. The attack ca...

CVE-2025-6612: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/removeCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated...

CVE-2025-6611: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/createBrand.php. The manipulation of the argument brandStatus leads to sql injection. The attack can be initiated remotely...

CVE-2025-6665: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection. The attack can be...

PT-2025-26882 · Unknown · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /php action/editBrand.php. The manipulation of the editBrandStatus argument leads to SQL...

CVE-2025-6474

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeUsername.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The exploit ha...

Between Buzz and Reality: The CTEM Conversation We All Need

I had the honor of hosting the first episode of the Xposure Podcast live from Xposure Summit 2025. And I couldn't have asked for a better kickoff panel: three cybersecurity leaders who don't just talk security, they live it. Let me introduce them. Alex Delay , CISO at IDB Bank, knows what it mean...

CVE-2025-50012

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fridaysystems Inventory Presser inventory-presser allows Stored XSS.This issue affects Inventory Presser: from n/a through = 15.2.6...

CVE-2025-49977

Cross-Site Request Forgery CSRF vulnerability in mylacventures WP Inventory Manager wp-inventory-manager allows Cross Site Request Forgery.This issue affects WP Inventory Manager: from n/a through = 2.3.4...

CVE-2025-6314

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/catupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...