CVE-2025-0199: code-projects Point of Sales and Inventory Management System minus_cart.php sql injection
First published: Fri Jan 03 2025(Updated: )
A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected is an unknown function of the file /user/minus_cart.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Code-projects Point of Sales and Inventory Management System | ||
| Code-projects Point of Sales and Inventory Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0199?
CVE-2025-0199 is classified as a critical severity vulnerability.
How does CVE-2025-0199 affect the Point of Sales and Inventory Management System?
CVE-2025-0199 allows for SQL injection through the manipulation of the 'id' argument in the file /user/minus_cart.php.
What are the potential impacts of exploiting CVE-2025-0199?
Exploiting CVE-2025-0199 could allow an attacker to execute arbitrary SQL queries on the database.
How do I fix CVE-2025-0199?
To fix CVE-2025-0199, sanitize and validate user inputs passed to the 'id' argument in the /user/minus_cart.php file.
Is there a patch available for CVE-2025-0199?
As of now, there is no specific information on a patch for CVE-2025-0199, so implementing secure coding practices is essential.
- agent/title
- agent/weakness
- agent/type
- agent/references
- agent/first-publish-date
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- vendor/code-projects
- canonical/code-projects point of sales and inventory management system
- version/code-projects point of sales and inventory management system/1.0