CVE-2025-6612: code-projects Inventory Management System removeCategories.php sql injection
A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/removeCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6612?
CVE-2025-6612 has been rated as critical due to its potential for SQL injection.
How do I fix CVE-2025-6612?
To fix CVE-2025-6612, sanitize and validate inputs for the categoriesId parameter in the /php_action/removeCategories.php file.
What software is affected by CVE-2025-6612?
CVE-2025-6612 affects the Inventory Management System version 1.0 developed by code-projects.
What type of vulnerability is CVE-2025-6612?
CVE-2025-6612 is classified as an SQL injection vulnerability.
What could happen if CVE-2025-6612 is exploited?
If exploited, CVE-2025-6612 may allow an attacker to manipulate database queries, potentially leading to data exposure or compromise.