A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file incview.php. The manipulation of the argument incid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/magic2353112890/cve/issues/7 | Exploit Third Party Advisory Issue Tracking |
| https://github.com/magic2353112890/cve/issues/7 | Exploit Third Party Advisory Issue Tracking |
| https://itsourcecode.com/ | Product |
| https://vuldb.com/?ctiid.294303 | Permissions Required VDB Entry |
| https://vuldb.com/?id.294303 | Third Party Advisory VDB Entry |
Configurations
History
22 Apr 2025, 15:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:angeljudesuarez:tailoring_management_system:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-89 | |
| First Time |
Angeljudesuarez
Angeljudesuarez tailoring Management System |
|
| References | () https://vuldb.com/?id.294303 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/magic2353112890/cve/issues/7 - Exploit, Third Party Advisory, Issue Tracking | |
| References | () https://vuldb.com/?ctiid.294303 - Permissions Required, VDB Entry | |
| References | () https://itsourcecode.com/ - Product |
03 Feb 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-74 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
01 Feb 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-01 18:15
Updated : 2025-04-22 15:19
NVD link : CVE-2025-0948
Mitre link : CVE-2025-0948
JSON object : View
Products Affected
angeljudesuarez
- tailoring_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')