CVE-2025-0946: itsourcecode Tailoring Management System templatedelete.php sql injection
First published: Sat Feb 01 2025(Updated: )
A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file templatedelete.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| itsourcecode Tailoring Management System | ||
| Angeljudesuarez Tailoring Management System Project In Php | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0946?
CVE-2025-0946 has been classified as a critical vulnerability.
How does CVE-2025-0946 affect the Tailoring Management System?
CVE-2025-0946 allows for SQL injection through the manipulation of the 'id' argument in the file templatedelete.php.
Can CVE-2025-0946 be exploited remotely?
Yes, CVE-2025-0946 can be exploited remotely.
What is the first step to mitigate CVE-2025-0946?
To mitigate CVE-2025-0946, it is recommended to validate and sanitize inputs to the 'id' parameter in templatedelete.php.
Is there a patch available for CVE-2025-0946?
At this time, no official patch for CVE-2025-0946 has been released.
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/title
- agent/description
- agent/source
- agent/author
- agent/guess-ai
- agent/software-canonical-lookup
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- vendor/itsourcecode
- canonical/itsourcecode tailoring management system
- vendor/angeljudesuarez
- canonical/angeljudesuarez tailoring management system project in php
- version/angeljudesuarez tailoring management system project in php/1.0