CVE-2025-0947itsourcecode Tailoring Management System expview.php sql injection

Açıklama

A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affected by this issue is some unknown functionality of the file expview.php. The manipulation of the argument expid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• VDB-294302 | itsourcecode Tailoring Management System expview.php sql injection vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-294302 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• https://github.com/magic2353112890/cve/issues/7 exploitissue-trackingExploitIssue Tracking
• https://itsourcecode.com/ productProduct