CVE-2025-0946: itsourcecode Tailoring Management System templatedelete.php sql injection
A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file templatedelete.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0946?
CVE-2025-0946 has been classified as a critical vulnerability.
How does CVE-2025-0946 affect the Tailoring Management System?
CVE-2025-0946 allows for SQL injection through the manipulation of the 'id' argument in the file templatedelete.php.
Can CVE-2025-0946 be exploited remotely?
Yes, CVE-2025-0946 can be exploited remotely.
What is the first step to mitigate CVE-2025-0946?
To mitigate CVE-2025-0946, it is recommended to validate and sanitize inputs to the 'id' parameter in templatedelete.php.
Is there a patch available for CVE-2025-0946?
At this time, no official patch for CVE-2025-0946 has been released.