VULNERABILITY INTELLIGENCE

CVE-2025-68229

EPSS probability0.49%

CISA KEVNot currently listed

Published2025-12-16

Last modified2026-10-14

Description

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /php_action/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.