CVE-2025-0174: code-projects Point of Sales and Inventory Management System Parameter search_result2.php sql injection
First published: Fri Jan 03 2025(Updated: )
A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /user/search_result2.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Code-projects Point of Sales and Inventory Management System | ||
| Code-projects Point of Sales and Inventory Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0174?
CVE-2025-0174 has been classified as critical due to its potential impact on the affected component.
How do I fix CVE-2025-0174?
To fix CVE-2025-0174, ensure that you sanitize and validate all input parameters in the /user/search_result2.php file.
What components are affected by CVE-2025-0174?
CVE-2025-0174 affects the Parameter Handler functionality within the Point of Sales and Inventory Management System.
What type of attacks can CVE-2025-0174 lead to?
CVE-2025-0174 can lead to SQL injection attacks due to improper handling of user input.
Is there a patch available for CVE-2025-0174?
As of now, a specific patch has not been released for CVE-2025-0174, so users should manually address the vulnerability.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/source
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- vendor/code-projects
- canonical/code-projects point of sales and inventory management system
- version/code-projects point of sales and inventory management system/1.0