CNNVD-202506-3249 Information

Jun 25, 2025 cve

CNNVD ID

CNNVD-202506-3249

CVE-2025-6668

CNNVD Published: 2025-06-25

Description (Chinese)

Code-Projects Inventory Management System是Code-Projects开源的一个库存管理系统。 Code-Projects Inventory Management System 1.0版本存在注入漏洞，该漏洞源于对文件/php_action/fetchSelectedBrand.php中参数brandId的错误操作导致SQL注入。

Description (English)

Code-Projects Industry Systems is a stock management system for the open source of Code-Projects. The Code-Projects Inventory Management System Version 1.0 has an injection loophole, which results from an error in the operation of the parameter BrandId in the file/php action/fetchSelected Brand.php.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

Code-Projects

Published

2025-06-25

Last Modified

2026-02-24

References

https://vuldb.com/?id.313881 https://vuldb.com/?submit.602340 https://github.com/lijingze-eng/cve/issues/1 https://code-projects.org/ https://vuldb.com/?ctiid.313881 https://nvd.nist.gov/vuln/detail/CVE-2025-6668

Share on: