CVE-2025-0196: code-projects Point of Sales and Inventory Management System plist.php sql injection
First published: Fri Jan 03 2025(Updated: )
A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file /user/plist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Code-projects Point of Sales and Inventory Management System | ||
| Code-projects Point of Sales and Inventory Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0196?
CVE-2025-0196 is classified as a critical vulnerability.
How does CVE-2025-0196 affect the Point of Sales and Inventory Management System?
CVE-2025-0196 allows for SQL injection through improper handling of the 'cat' argument in the /user/plist.php file.
What are the potential impacts of exploiting CVE-2025-0196?
Exploitation of CVE-2025-0196 could allow an attacker to access and manipulate the database of the Point of Sales and Inventory Management System.
How do I fix CVE-2025-0196?
To mitigate CVE-2025-0196, validate and sanitize the user inputs before processing them in the SQL queries.
Is there a patch available for CVE-2025-0196 in the Point of Sales and Inventory Management System?
Currently, there may not be a specific patch available, so users should implement input validation and other security best practices until an official fix is released.
- agent/references
- agent/weakness
- agent/title
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- vendor/code-projects
- canonical/code-projects point of sales and inventory management system
- version/code-projects point of sales and inventory management system/1.0