6.3Medium
CVE-2025-0949itsourcecode Tailoring Management System partview.php sql injection
Description
A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file partview.php. The manipulation of the argument typeid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| angeljudesuarez | tailoring management system | 1.0 | |
| itsourcecode | Tailoring Management System | 1.0 |
References and patches
- VDB-294304 | itsourcecode Tailoring Management System partview.php sql injection vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- VDB-294304 | CTI Indicators (IOB, IOC, TTP, IOA) signatureVDB Entry
- https://github.com/magic2353112890/cve/issues/7 exploitissue-trackingExploitIssue Tracking
- https://itsourcecode.com/ productProduct
CPE matches (NVD) (1)
cpe:2.3:a:angeljudesuarez:tailoring_management_system:1.0:*:*:*:*:*:*:*