CVE-2025-4886: itsourcecode Sales and Inventory System product_update.php sql injection
A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/productupdate.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4886?
CVE-2025-4886 is classified as a critical vulnerability.
How does CVE-2025-4886 affect the Sales and Inventory System?
CVE-2025-4886 affects the Sales and Inventory System through an SQL injection vulnerability in the /pages/product_update.php file.
What is the attack vector for CVE-2025-4886?
The attack vector for CVE-2025-4886 involves manipulating the 'serial' argument, leading to potential SQL injection.
How can I determine if I'm vulnerable to CVE-2025-4886?
To determine if you're vulnerable to CVE-2025-4886, verify if your version of the itsourcecode Sales and Inventory System is running version 1.0.
What steps should I take to mitigate CVE-2025-4886?
To mitigate CVE-2025-4886, ensure to sanitize user inputs in the affected file to prevent SQL injection attacks.