CVE-2025-6823: code-projects Inventory Management System editProduct.php sql injection
A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/editProduct.php. The manipulation of the argument editProductName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6823?
CVE-2025-6823 is rated as critical due to its potential for SQL injection.
How do I fix CVE-2025-6823?
To fix CVE-2025-6823, sanitize user inputs and utilize prepared statements in the affected file /php_action/editProduct.php.
What are the potential impacts of CVE-2025-6823?
CVE-2025-6823 may allow attackers to execute arbitrary SQL queries, leading to unauthorized data access.
Which software is affected by CVE-2025-6823?
CVE-2025-6823 affects the Inventory Management System version 1.0 from code-projects.
How can I identify exploitation attempts related to CVE-2025-6823?
Monitoring for unusual database queries or error messages related to /php_action/editProduct.php can help identify exploitation attempts.