Description
Tailoring Management System是itsourcecode开源的一个量身定制的管理系统。 Tailoring Management System 1.0版本存在SQL注入漏洞，该漏洞源于文件partedit.php的参数id会导致SQL注入。
Tailoring Management System SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.knowsafe.com/ti/info/0/988598
https://cve.imfht.com/detail/CVE-2025-0947
https://www.cnvd.org.cn/patchInfo/show/422681
https://www.nsfocus.net/vulndb/115069
https://vuldb.com/zh/?id.272075
https://www.sxxdckj.com/cms/a/Tailor-Management-System-SQL-zhu-ru-lou-dong-CNVD-2023-29361.html
https://avd.aliyun.com/detail?id=AVD-2025-0949
https://www.sentinelone.com/vulnerability-database/cve-2024-10609/
https://cert.kenet.or.ke/cve-2025-0943-isourcecode-tailoring-management-system-sql-injection-vulnerability
https://www.cve.org/CVERecord?id=CVE-2024-8171
https://nvd.nist.gov/vuln/detail/cve-2024-8220
https://blogs.cappriciosec.com/cve/242/CVE-2024-7455%20-%20Critical%20SQL%20Injection%20Vulnerability%20in%20itsourcecode%20Tailoring%20Management%20System
https://cvefeed.io/vuln/detail/CVE-2025-0949
https://dbugs.ptsecurity.com/vulnerability/PT-2024-5174