https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T20:40:12.072825+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-4885 CVE-2025-4885 — itsourcecode Sales and Inventory System product_add.php sql injection 2026-10-03T20:40:12.099844+00:00

Affected: itsourcecode Sales and Inventory System

A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument serial leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.