CVE-2025-4283

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely...

CVE-2025-4283

creationtimestamp| type| source ---|---|--- 2025-05-05 20:16:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loh6qrvxiz2w 2025-05-05 21:33:05+00:00| published-proof-of-concept| Telegram/4ybX3uzHn196N4ZX40WWFSYjrgaegjcyIGLUDry13ex5SY 2025-05-05 21:44:15+00:00| exploited|...

CVE-2025-4283

SourceCodester/oretnom23 Stock Management System 1.0 contains a SQL injection flaw in the login flow. The vulnerability specifically arises from manipulation of the Username parameter in /classes/Login.php?f=login, enabling remote exploitation. Public disclosures exist; CVSS metrics indicate high...