CVE-2025-11610: SourceCodester Simple Inventory System brand.php sql injection
A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11610?
The severity of CVE-2025-11610 is critical due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-11610?
To fix CVE-2025-11610, it is recommended to sanitize all user inputs, specifically for the editBrandName parameter.
What systems are affected by CVE-2025-11610?
CVE-2025-11610 affects SourceCodester Simple Inventory System version 1.0.
Can CVE-2025-11610 be exploited remotely?
Yes, CVE-2025-11610 can be exploited remotely, allowing attackers to perform SQL injection attacks.
What specific file is vulnerable in CVE-2025-11610?
The specific file vulnerable in CVE-2025-11610 is /brand.php.