CVE-2025-4787: SourceCodester/oretnom23 Stock Management System view_sale sql injection
A vulnerability classified as critical has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected is an unknown function of the file /admin/?page=sales/viewsale. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4787?
CVE-2025-4787 is classified as a critical vulnerability.
How does CVE-2025-4787 impact the system?
CVE-2025-4787 allows for SQL injection through the manipulation of the ID argument in the /admin/?page=sales/view_sale file.
How do I fix CVE-2025-4787?
To fix CVE-2025-4787, ensure proper input validation and sanitize user inputs to prevent SQL injection attacks.
Which version of the software is affected by CVE-2025-4787?
CVE-2025-4787 affects SourceCodester's oretnom23 Stock Management System version 1.0.
Is there a patch available for CVE-2025-4787?
As of now, specific patch details for CVE-2025-4787 have not been provided.