CVE-2025-6819: code-projects Inventory Management System removeBrand.php sql injection
A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/removeBrand.php. The manipulation of the argument brandId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6819?
CVE-2025-6819 is classified as a critical vulnerability.
What type of vulnerability is CVE-2025-6819?
CVE-2025-6819 is a SQL injection vulnerability affecting the removeBrand.php file.
How does CVE-2025-6819 affect the Inventory Management System?
CVE-2025-6819 allows an attacker to manipulate the brandId argument, potentially compromising the database.
How can I fix CVE-2025-6819?
To fix CVE-2025-6819, input validation and parameterized queries should be implemented in the affected file.
Is there a workaround for CVE-2025-6819?
A possible workaround for CVE-2025-6819 is to restrict access to the removeBrand.php file until a patch is deployed.