A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signup.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://code-projects.org/ | Product |
| https://github.com/InorSogeih/Inor/issues/1 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.337595 | Permissions Required VDB Entry |
| https://vuldb.com/?id.337595 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.717344 | Third Party Advisory VDB Entry |
| https://github.com/InorSogeih/Inor/issues/1 | Exploit Issue Tracking |
Configurations
History
30 Dec 2025, 17:30
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Carmelo simple Stock System
Carmelo |
|
| References | () https://code-projects.org/ - Product | |
| References | () https://github.com/InorSogeih/Inor/issues/1 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?ctiid.337595 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.337595 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.717344 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:carmelo:simple_stock_system:1.0:*:*:*:*:*:*:* |
19 Dec 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/InorSogeih/Inor/issues/1 - |
19 Dec 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-19 18:15
Updated : 2025-12-30 17:30
NVD link : CVE-2025-14959
Mitre link : CVE-2025-14959
CVE.ORG link : CVE-2025-14959
JSON object : View
Products Affected
carmelo
- simple_stock_system