6.3Media
CVE-2025-0948itsourcecode Tailoring Management System incview.php sql injection
Descripción
A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file incview.php. The manipulation of the argument incid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| angeljudesuarez | tailoring management system | 1.0 | |
| itsourcecode | Tailoring Management System | 1.0 |
Referencias y parches
- VDB-294303 | itsourcecode Tailoring Management System incview.php sql injection vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- VDB-294303 | CTI Indicators (IOB, IOC, TTP, IOA) signatureVDB Entry
- https://github.com/magic2353112890/cve/issues/7 exploitissue-trackingExploitIssue Tracking
- https://itsourcecode.com/ productProduct
Coincidencias CPE (NVD) (1)
cpe:2.3:a:angeljudesuarez:tailoring_management_system:1.0:*:*:*:*:*:*:*