CVE-2025-11610
SourceCodester Simple Inventory System brand.php sql injection
A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
CVSS 4.0 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products