Medium severity5.3NVD Advisory· Published Nov 23, 2025· Updated Jun 17, 2026

CVE-2025-13565

Description

A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Warren Daloyan/Inventory Management System
cpe:2.3:a:warren-daloyan:inventory_management_system:1.0:*:*:*:*:*:*:*
Sourcecodester/Inventory Management Systemllm-fuzzy
Range: 1.0
Sourcecodester/Pet Management Systemcpe-rescue
Range: 1.0

Patches

Vulnerability mechanics

References

www.notion.so/Unauthenticated-Password-Reset-Vulnerability-in-SourceCodester-Inventory-Management-System-2b023917db8c8001b5ecf4c50a54dfbdnvdExploitThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry
www.sourcecodester.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000