CVE-2025-4885: itsourcecode Sales and Inventory System product_add.php sql injection
A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument serial leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4885?
CVE-2025-4885 is classified as a critical severity vulnerability.
What type of vulnerability is CVE-2025-4885?
CVE-2025-4885 is an SQL injection vulnerability affecting the Sales and Inventory System.
How can I exploit CVE-2025-4885?
CVE-2025-4885 can be exploited remotely by manipulating the 'serial' argument in the /pages/product_add.php file.
What is the impact of CVE-2025-4885?
The impact of CVE-2025-4885 includes potential unauthorized access to sensitive data stored in the database.
How do I fix CVE-2025-4885?
To fix CVE-2025-4885, ensure proper input validation and use parameterized queries to mitigate SQL injection risks.