Description
Code-Projects Inventory Management System是Code-Projects开源的一个库存管理系统。 Code-Projects Inventory Management System 1.0版本存在注入漏洞，该漏洞源于对文件/php_action/fetchSelectedBrand.php中参数brandId的错误操作导致SQL注入。
Code-Projects Inventory Management System 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2023-46582
https://github.com/ersinerenler/Code-Projects-Inventory-Management-1.0/blob/main/CVE-2023-46582-Code-Projects-Inventory-Management-1.0-SQL-Injection-Vulnerability.md
https://www.redpacketsecurity.com/code-projects-inventory-management-sql-injection-cve-2023-46581/
https://nvd.nist.gov/vuln/detail/CVE-2025-6500
https://www.sentinelone.com/vulnerability-database/cve-2025-6611/
https://vuldb.com/submit/604508
https://mondoo.com/vulnerability-intelligence/vulnerability/CVE-2026-7070
https://www.cve.org/CVERecord?id=CVE-2025-6612
https://radar.offseq.com/threat/cve-2026-7070-sql-injection-in-code-projects-inven-f9f55dfc