CVE-2025-0872

A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment.php. The manipulation of the argument id/amount/desc/inccat leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-0872

creationtimestamp| type| source ---|---|--- 2025-01-30 16:06:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113918161397673238 2025-01-30 16:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxuyn6miv2i 2025-01-30 18:27:01+00:00| seen|...

CVE-2025-0872

CVE-2025-0872 affects itsourcecode Tailoring Management System 1.0. A SQL injection vulnerability exists in /addpayment.php via manipulated id/amount/desc/inccat parameters, exploitable remotely with exploits publicly disclosed. Root cause is unsafe handling of input in the PHP file. Impact is st...