CVE-2025-6822

CVE-2025-6822 affects code-projects Inventory Management System 1.0, specifically the /php_action/removeProduct.php endpoint. The vulnerability is a SQL injection caused by improper handling of the productId parameter, enabling remote exploitation. Several connected sources corroborate this issue...