A vulnerability was found in itsourcecode Inventory Management System 1.0. It has been declared as critical. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument U_USERNAME results in sql injection.

This vulnerability is reported as CVE-2025-13237. The attack can be launched remotely. Moreover, an exploit is present.