Vulnerability Description
A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Warren-Daloyan | Inventory Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://vuldb.com/?ctiid.333329Permissions RequiredVDB Entry
- https://vuldb.com/?id.333329Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.697984Third Party AdvisoryVDB Entry
- https://www.notion.so/Unauthenticated-Password-Reset-Vulnerability-in-SourceCodeExploitThird Party Advisory
- https://www.sourcecodester.com/Product
FAQ
What is CVE-2025-13565?
CVE-2025-13565 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead...
How severe is CVE-2025-13565?
CVE-2025-13565 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13565?
Check the references section above for vendor advisories and patch information. Affected products include: Warren-Daloyan Inventory Management System.