CVE-2025-0174: code-projects Point of Sales and Inventory Management System Parameter search_result2.php sql injection
A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /user/searchresult2.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0174?
CVE-2025-0174 has been classified as critical due to its potential impact on the affected component.
How do I fix CVE-2025-0174?
To fix CVE-2025-0174, ensure that you sanitize and validate all input parameters in the /user/search_result2.php file.
What components are affected by CVE-2025-0174?
CVE-2025-0174 affects the Parameter Handler functionality within the Point of Sales and Inventory Management System.
What type of attacks can CVE-2025-0174 lead to?
CVE-2025-0174 can lead to SQL injection attacks due to improper handling of user input.
Is there a patch available for CVE-2025-0174?
As of now, a specific patch has not been released for CVE-2025-0174, so users should manually address the vulnerability.