CVE-2025-6501: code-projects Inventory Management System createCategories.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /phpaction/createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6501?
CVE-2025-6501 is classified as a critical vulnerability.
How do I fix CVE-2025-6501?
To fix CVE-2025-6501, ensure to sanitize and validate input parameters in the /php_action/createCategories.php file to prevent SQL injection.
What type of vulnerability is CVE-2025-6501?
CVE-2025-6501 is an SQL injection vulnerability affecting the Inventory Management System.
Which software is affected by CVE-2025-6501?
CVE-2025-6501 affects the Inventory Management System 1.0 developed by code-projects.
What component of the Inventory Management System is affected by CVE-2025-6501?
CVE-2025-6501 affects the /php_action/createCategories.php file within the Inventory Management System.