Lucene search
K

8 matches found

Cvelist
Cvelist
added 2025/11/16 4:2 a.m.8 views

CVE-2025-13236 itsourcecode Inventory Management System index.php sql injection

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

6.5CVSS0.00027EPSS
Exploits1References5
CVE
CVE
added 2025/11/16 4:2 a.m.7 views

CVE-2025-13236

Affected software: itsourcecode Inventory Management System 1.0. Vulnerability: SQL injection arising from improper handling of the ID parameter in the file /admin/products/index.php?view=edit. Where: The vulnerability is triggered via the index.php?view=edit path under the admin/products directo...

9.8CVSS6.4AI score0.00027EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/11/16 3:2 a.m.7 views

CVE-2025-13234

The CVE-2025-13234 affects itsourcecode Inventory Management System 1.0, with a SQL injection flaw in the PROID parameter of /index.php?q=product. Multiple sources confirm remote exploitation and a publicly released exploit. Remediation is not detailed in the initial document beyond recommending ...

9.8CVSS6.4AI score0.00027EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/16 3:2 a.m.8 views

CVE-2025-13234 itsourcecode Inventory Management System index.php sql injection

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

6.5CVSS0.00027EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/16 2:32 a.m.2 views

CVE-2025-13233 itsourcecode Inventory Management System index.php sql injection

A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...

7.5CVSS6.6AI score0.00028EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/16 12:0 a.m.1 views

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that originates from improper handling of the UUSERNAME parameter in the /LogSignModal.PHP file. No details of the vulnerability are available at this time...

9.8CVSS7.8AI score0.00028EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/16 12:0 a.m.1 views

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. The Inventory Management System suffers from a SQL injection vulnerability that originates from the PROID parameter in the /index.php?q=product file that does not securely filter user input. An attacker can exploit this vulnerability ...

9.8CVSS7AI score0.00027EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/16 12:0 a.m.3 views

PT-2025-47068

Name of the Vulnerable Software and Affected Versions itsourcecode Inventory Management System version 1.0 Description A SQL injection issue exists in itsourcecode Inventory Management System. The issue is triggered by manipulating the PROID argument in the /index.php?q=product endpoint. This...

9.8CVSS6.8AI score0.00027EPSS
Exploits1References10
Rows per page
Query Builder