CVE-2025-14959

CWE-74CWE-89 — SQL InjectionCWE-319 — Cleartext Transmission4 documents4 sources
Severity
6.9MEDIUM
EPSS
0.0%
top 88.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Simple Stock SystemCarmelo Simple Stock System
Timeline
PublishedDec 19

Description

A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signup.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
code-projects Simple Stock System signup.php sql injection↗2025-12-19
▶
GHSA
GHSA-3vmx-m7j4-mgq5: A weakness has been identified in code-projects Simple Stock System 1↗2025-12-19
▶

📋Vendor Advisories

1
Microsoft
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.↗2019-10-08
▶
CVE-2025-14959 (MEDIUM CVSS 6.9) | A weakness has been identified in c | cvebase.io