CVE-2025-6502

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /phpaction/changePassword.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-6502

creationtimestamp| type| source ---|---|--- 2025-06-23 03:47:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19178 2025-06-23 04:02:02+00:00| published-proof-of-concept| Telegram/A4SKSlvE1Blz65EJMMkjC0omoAHMWgMo0vKAMV8UaIwgc0 2025-06-23 08:03:51+00:00| seen|...

CVE-2025-6502 code-projects Inventory Management System changePassword.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /phpaction/changePassword.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-6502 code-projects Inventory Management System changePassword.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /phpaction/changePassword.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-6502

CVE-2025-6502 affects code-projects’ Inventory Management System 1.0. The vulnerability arises from unsafely handling the user_id parameter in the file /php_action/changePassword.php , enabling SQL injection . The attack is described as remotely exploitable and the exploit has been publicly discl...