CVE-2025-13565: medium-severity vulnerability in SourceCodester Inventory Management System
SourceCodester Inventory Management System resetPassword.php password recovery
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.5%
A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Inventory Management SystemRelated CVEs — SourceCodester Inventory Management System
In the same product, most dangerous first.
CVE-2023-4749MEDIUMSourceCodester Inventory Management System index.php file inclusionEPSS 1.0%CVE-2023-4558MEDIUMSourceCodester Inventory Management System staff_data.php sql injectionEPSS 0.7%CVE-2023-4436MEDIUMSourceCodester Inventory Management System edit_update.php sql injectionEPSS 0.7%CVE-2023-4201MEDIUMSourceCodester Inventory Management System ex_catagory_data.php sql injectionEPSS 0.7%CVE-2023-4200MEDIUMSourceCodester Inventory Management System product_data.php. sql injectionEPSS 0.7%CVE-2023-4438MEDIUMSourceCodester Inventory Management System search_sales_report.php sql injectionEPSS 0.7%