CNNVD-202506-3224 Information

CNNVD ID

CNNVD-202506-3224

CVE-2025-6665

  • CNNVD Published: 2025-06-25

Description (Chinese)

Code-Projects Inventory Management System是Code-Projects开源的一个库存管理系统。 Code-Projects Inventory Management System 1.0版本存在注入漏洞,该漏洞源于对文件/php_action/editBrand.php中参数editBrandStatus的错误操作导致SQL注入。

Description (English)

Code-Projects Industry Systems is a stock management system for the open source of Code-Projects. The Code-Projects Inventory Management System Version 1.0 has an injection loophole, resulting from an error in the parameter in file/php action/editBrand.php that caused the SQL injection.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

Code-Projects

Published

2025-06-25

Last Modified

2026-02-24

References

https://github.com/catfish258/cve/issues/1 https://vuldb.com/?ctiid.313879 https://code-projects.org/ https://vuldb.com/?id.313879 https://vuldb.com/?submit.602324 https://nvd.nist.gov/vuln/detail/CVE-2025-6665

Share on: