CVE-2025-6611: code-projects Inventory Management System createBrand.php sql injection
A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/createBrand.php. The manipulation of the argument brandStatus leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6611?
CVE-2025-6611 is classified as critical due to its potential impact on the Inventory Management System.
How does CVE-2025-6611 affect the Inventory Management System?
CVE-2025-6611 allows for SQL injection vulnerabilities through manipulation of the brandStatus argument in /php_action/createBrand.php.
What should I do if my system is affected by CVE-2025-6611?
If your system is affected by CVE-2025-6611, you should immediately apply security patches and validate user inputs to mitigate the risk of SQL injection.
Which versions of the Inventory Management System are impacted by CVE-2025-6611?
CVE-2025-6611 affects code-projects Inventory Management System version 1.0.
Can CVE-2025-6611 be exploited remotely?
Yes, CVE-2025-6611 can be exploited remotely if an attacker manipulates the vulnerable input in the affected PHP file.