CVE-2025-0948: itsourcecode Tailoring Management System incview.php sql injection
A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file incview.php. The manipulation of the argument incid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0948?
CVE-2025-0948 is classified as a critical vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-0948?
To mitigate CVE-2025-0948, update the Tailoring Management System to the latest version and implement input validation on the 'incid' parameter.
What type of vulnerability is CVE-2025-0948?
CVE-2025-0948 is an SQL injection vulnerability affecting the incview.php file in the Tailoring Management System.
Is CVE-2025-0948 exploitable remotely?
Yes, CVE-2025-0948 can be exploited remotely, allowing attackers to manipulate the 'incid' argument.
What software is affected by CVE-2025-0948?
CVE-2025-0948 affects itsourcecode's Tailoring Management System version 1.0.