CVE-2025-13234: itsourcecode Inventory Management System index.php sql injection
A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13234?
CVE-2025-13234 is considered a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-13234?
To fix CVE-2025-13234, it is recommended to validate and sanitize user inputs for the PROID parameter in the index.php file.
What type of vulnerability is identified in CVE-2025-13234?
CVE-2025-13234 is identified as an SQL injection vulnerability that affects the Inventory Management System.
Can CVE-2025-13234 be exploited remotely?
Yes, CVE-2025-13234 can be exploited remotely, allowing attackers to manipulate the application through SQL injection.
Which software is affected by CVE-2025-13234?
CVE-2025-13234 affects the itsourcecode Inventory Management System version 1.0.