CVE-2025-0873: itsourcecode Tailoring Management System customeredit.php sql injection
A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /customeredit.php. The manipulation of the argument id/address/fullname/phonenumber/email/city/comment leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0873?
CVE-2025-0873 is classified as a critical vulnerability.
What component is affected by CVE-2025-0873?
CVE-2025-0873 affects the /customeredit.php file of the itsourcecode Tailoring Management System.
What types of input can be manipulated in CVE-2025-0873?
The input parameters affected by CVE-2025-0873 include id, address, fullname, phonenumber, email, city, and comment.
How do I fix CVE-2025-0873?
To fix CVE-2025-0873, sanitize and validate all user inputs in the affected functionality.
What type of attack does CVE-2025-0873 enable?
CVE-2025-0873 enables SQL injection attacks due to improper handling of input parameters.