Inventory Management System EUVD-2025-18864

The CVSS v3.1 score of 7.3 (High) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L indicates: network-accessible attack surface, low complexity (no special techniques required), no authentication needed, and moderate confidentiality/integrity/availability impact. The publicly disclosed nature and availability of exploit code significantly elevate real-world risk despite the 'High' rather than 'Critical' CVSS rating. The combination of: (1) unauthenticated remote exploitation, (2) public POC availability, (3) common technology stack (PHP), and (4) direct SQL injection in password change functionality suggests high EPSS probability and active exploitation likelihood. This meets criteria for immediate remediation—it is not a theoretical high-CVSS-low-risk issue but rather a practically exploitable vulnerability affecting authentication systems. Priority should be CRITICAL in operational environments.

An unauthenticated attacker discovers the vulnerable changePassword.php endpoint and crafts a malicious HTTP request with SQL injection payload in the user_id parameter. Example: POST /php_action/changePassword.php with user_id=1' OR '1'='1 or user_id=1; DROP TABLE users;--. The vulnerable code constructs a query like: SELECT * FROM users WHERE user_id = [user_input] without parameterization. The injected SQL executes within the application's database context, allowing the attacker to: (1) extract sensitive user credentials and personal data, (2) modify password hashes for privilege escalation, (3) delete records, or (4) potentially execute operating system commands if database permissions allow. Given the public disclosure and available POC, exploitation is likely occurring or will occur imminently in unpatched instances, particularly targeting inventory systems managing sensitive business data.