6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Basic Information
ID
CVE-2025-11424
Source
VulDB
Published
Oct 8, 2025 at 02:02
Affected Product
Vendor
code-projects
Product
Web-Based Inventory and POS System
Version
1.0
Affected Versions
code-projects Web-Based Inventory and POS System 1.0