Description
A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /sms/admin/?page=receiving/view_receiving&id=1. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Stock Management System | 1.0 |
| oretnom23 | Stock Management System | 1.0 |
References
- https://github.com/th3w0lf-1337/Vulnerabilities/blob/main/SMS-PHP/SQLi/Receiving/info.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.309082Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.309082Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.572195Third Party Advisory, VDB Entry
- https://github.com/th3w0lf-1337/Vulnerabilities/blob/main/SMS-PHP/SQLi/Receiving/info.mdExploit, Third Party Advisory
Timeline
- Published
- May 16, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed