PT-2025-4106 · Unknown · Itsourcecode Tailoring Management System

Magic2353112890

·

Published

2025-02-01

·

Updated

2025-05-24

·

CVE-2025-0944

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions itsourcecode Tailoring Management System version 1.0
Description A critical issue affects the processing of the file customerview.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Recommendations As a temporary workaround, consider restricting access to the customerview.php file until a patch is available. Avoid using the id argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74CWE-89

Related Identifiers

BDU:2025-07579
CVE-2025-0944

Affected Products

Itsourcecode Tailoring Management System