CVE-2025-13235: itsourcecode Inventory Management System login.php sql injection
A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument useremail can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13235?
CVE-2025-13235 is considered a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-13235?
To fix CVE-2025-13235, ensure to validate and sanitize user inputs, especially the user_email parameter in the /admin/login.php file.
What systems are affected by CVE-2025-13235?
CVE-2025-13235 affects itsourcecode Inventory Management System version 1.0.
Can CVE-2025-13235 be exploited remotely?
Yes, CVE-2025-13235 can be exploited remotely, allowing attackers to perform unauthorized SQL queries.
What are the potential impacts of CVE-2025-13235?
The potential impacts of CVE-2025-13235 include unauthorized data access, data manipulation, and complete system compromise due to SQL injection.