CVE-2025-6822: code-projects Inventory Management System removeProduct.php sql injection
A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6822?
CVE-2025-6822 is declared as critical due to the potential for SQL injection vulnerabilities.
How do I fix CVE-2025-6822?
To fix CVE-2025-6822, you should validate and sanitize the input for the productId argument in the /php_action/removeProduct.php file.
What systems are affected by CVE-2025-6822?
CVE-2025-6822 affects the Code-projects Inventory Management System version 1.0.
What type of vulnerability is CVE-2025-6822?
CVE-2025-6822 is an SQL injection vulnerability that can lead to unauthorized database access.
How can CVE-2025-6822 be exploited?
CVE-2025-6822 can be exploited by manipulating the productId argument in a request to the vulnerable script.