CVE-2025-13257: itsourcecode Inventory Management System index.php sql injection
A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13257?
CVE-2025-13257 is classified as a high severity vulnerability due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-13257?
To fix CVE-2025-13257, validate and sanitize user input for the 'ID' parameter in the affected 'index.php' file.
What systems are affected by CVE-2025-13257?
CVE-2025-13257 affects the itsourcecode Inventory Management System version 1.0.
What kind of attack can be executed using CVE-2025-13257?
An attacker can execute a remote SQL injection attack using CVE-2025-13257.
Where in the code is CVE-2025-13257 located?
CVE-2025-13257 is located in the /admin/user/index.php file, specifically within the function that handles the 'view' parameter.