CVE-2025-13565: SourceCodester Inventory Management System resetPassword.php password recovery
A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13565?
The severity of CVE-2025-13565 is considered critical due to its potential for weak password recovery.
How do I fix CVE-2025-13565?
To fix CVE-2025-13565, update the SourceCodester Inventory Management System to the latest version and improve the password recovery function.
What systems are affected by CVE-2025-13565?
CVE-2025-13565 affects the SourceCodester Inventory Management System version 1.0.
Can CVE-2025-13565 be exploited remotely?
Yes, CVE-2025-13565 can be exploited remotely, allowing attackers to manipulate password recovery functionality.
What type of vulnerability is CVE-2025-13565?
CVE-2025-13565 is a weakness in the password recovery process that can lead to unauthorized access.