CVE-2025-6611

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /php_action/createBrand.php. The manipulation of the argument brandStatus leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89
• CWE-89

• https://code-projects.org/Product
• https://github.com/Lwlej/cve/issues/2Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.313828Permissions Required, VDB Entry
• https://vuldb.com/?id.313828Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.601976Third Party Advisory, VDB Entry

Published

Jun 25, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-66104Missing Authorization vulnerability in Anton Vanyukov Offloa…6.5
• CVE-2025-66105Missing Authorization vulnerability in Magepeople inc. Bus T…5.3
• CVE-2025-66106Missing Authorization vulnerability in Essential Plugin Feat…4.3
• CVE-2025-66107Missing Authorization vulnerability in Scott Paterson Subscr…5.3
• CVE-2025-66108Missing Authorization vulnerability in Merlot Digital (by TN…4.3
• CVE-2025-66109Missing Authorization vulnerability in Octolize Shipping Plu…5.3
• CVE-2025-66110Missing Authorization vulnerability in bPlugins Tiktok Feed …5.3
• CVE-2025-66111Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-66112Missing Authorization vulnerability in WebToffee Accessibili…4.3
• CVE-2025-66113Missing Authorization vulnerability in ThemeAtelier Better C…5.3
• CVE-2025-66114Missing Authorization vulnerability in theme funda Show Vari…5.3
• CVE-2025-66115Improper Control of Filename for Include/Require Statement i…6.6