CNNVD-202510-1198 Information

CNNVD ID

CNNVD-202510-1198

CVE-2025-11424

  • CNNVD Published: 2025-10-08

Description (Chinese)

Code-Projects Web-Based Inventory and POS System是Code-Projects开源的一个基于web的库存和POS系统。 code-projects Web-Based Inventory and POS System 1.0版本存在安全漏洞,该漏洞源于对文件/login.php中参数emailid的错误操作,可能导致SQL注入攻击。

Description (English)

Code-Projects Web-Based Information and POS Systems is a web-based inventory and POS system that is open to Code-Projects. There is a security loophole in version 1.0 of code-projects Web-Basted Industries and POS System, which stems from an error in emailid ’ s parameter in the document/login.php, which could lead to an SQL injection attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Code-Projects

Published

2025-10-08

Last Modified

2026-02-24

References

https://code-projects.org/ https://github.com/Real-Rio/vulnreport/blob/main/SQL6.md https://vuldb.com/?ctiid.327359 https://vuldb.com/?id.327359 https://vuldb.com/?submit.666209

Share on: