A vulnerability classified as critical was found in code-projects Simple Stock System 1.0. This affects an unknown function of the file /market/login.php. Executing manipulation of the argument Username can lead to sql injection.

This vulnerability is tracked as CVE-2025-15243. The attack can be launched remotely. Moreover, an exploit is present.