CVE-2025-13236

MediumCVSS 6.3

Published: 16/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

Risk Assessment

This may allow an attacker to access the database, modify or steal data.

Recommendation

Update the system to a version that fixes the vulnerability or implement input validation patches.

Other vulnerabilities in itsourcecode Inventory Management System

CVE-2025-13234Medium
A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS