CVE-2025-13233: itsourcecode Inventory Management System index.php sql injection
A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13233?
CVE-2025-13233 has a high severity rating due to the potential for SQL injection attacks.
How do I fix CVE-2025-13233?
To fix CVE-2025-13233, ensure that all user inputs are properly sanitized and use prepared statements for database queries.
What systems are affected by CVE-2025-13233?
CVE-2025-13233 affects itsourcecode Inventory Management System 1.0.
Can CVE-2025-13233 be exploited remotely?
Yes, CVE-2025-13233 can be exploited remotely through manipulation of the query parameters.
What type of attack does CVE-2025-13233 facilitate?
CVE-2025-13233 facilitates SQL injection attacks due to inadequate input validation.