CVE-2025-4782

CWE-74CWE-89 — SQL InjectionCWE-22 — Path Traversal5 documents5 sources
Severity
5.3MEDIUM
EPSS
0.2%
top 55.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oretnom23 Stock Management SystemSourcecodester Stock Management System
Timeline
PublishedMay 16
Latest updateMay 19

Description

A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /sms/admin/?page=receiving/view_receiving&id=1. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-2m9r-8wqr-rccv: A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1↗2025-05-19
▶
CVEList
SourceCodester/oretnom23 Stock Management System view_receiving sql injection↗2025-05-16
▶

📋Vendor Advisories

2
Oracle
Oracle Oracle JD Edwards Risk Matrix: E1 Dev Platform Tech - Cloud (Terraform) — CVE-2023-4782↗2025-01-15
▶
Microsoft
Terraform Allows Arbitrary File Write During Init Operation↗2023-09-12
▶
CVE-2025-4782 (MEDIUM CVSS 5.3) | A vulnerability has been found in S | cvebase.io