CVE-2025-4806: SourceCodester/oretnom23 Stock Management System view_bo sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=backorder/viewbo. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4806?
CVE-2025-4806 is classified as a critical vulnerability.
How does CVE-2025-4806 impact the SourceCodester oretnom23 Stock Management System?
CVE-2025-4806 allows for SQL injection through manipulation of the ID argument in the URL.
What software versions are affected by CVE-2025-4806?
CVE-2025-4806 affects SourceCodester oretnom23 Stock Management System version 1.0.
How can I mitigate the risk of CVE-2025-4806?
To mitigate CVE-2025-4806, ensure proper input validation and parameterized queries to prevent SQL injection.
What specific functionality is affected by CVE-2025-4806?
CVE-2025-4806 affects the functionality of the /admin/?page=back_order/view_bo file.