Inventory Management System Project

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Inventory Management System Project records in CISA KEV

No Inventory Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Inventory Management System 16 records MEDIUM

Records

16 records

TI-2023-18213 CVE-2023-36337 · GHSA-pmq2-9644-7v7w

A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of…

MEDIUM 60

A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of PHP Inventory Management System 1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00225 Published 2025-12-15 No fix listed CWE-79

TI-2023-09944 CVE-2023-24234 · GHSA-2gxf-qq7x-x832

A stored cross-site scripting (XSS) vulnerability in the component…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted paylo…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0048 Published 2023-02-10 No fix listed CWE-79

TI-2023-09943 CVE-2023-24233 · GHSA-4x58-v336-8f77

A stored cross-site scripting (XSS) vulnerability in the component…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a craft…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0048 Published 2023-02-10 No fix listed CWE-79

TI-2023-09942 CVE-2023-24232 · GHSA-qr9m-j77f-86qv

A stored cross-site scripting (XSS) vulnerability in the component…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted pa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0048 Published 2023-02-10 No fix listed CWE-79

TI-2023-09941 CVE-2023-24231 · GHSA-qpv6-3r56-vvg8

A stored cross-site scripting (XSS) vulnerability in the component…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0048 Published 2023-02-10 No fix listed CWE-79

TI-2023-04204 CVE-2023-4558 · GHSA-pcwg-gcmh-8wc3

SourceCodester Inventory Management System staff_data.php sql injection

MEDIUM 43

A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-08-27 No fix listed CWE-89

TI-2023-04203 CVE-2023-4557 · GHSA-h8jx-2x82-m2qp

SourceCodester Inventory Management System search_purchase_paymen_report.php sql injection

MEDIUM 43

A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00613 Published 2023-08-27 No fix listed CWE-89

TI-2023-04096 CVE-2023-4438 · GHSA-g4qr-w38q-pxrw

SourceCodester Inventory Management System search_sales_report.php sql injection

MEDIUM 43

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00674 Published 2023-08-20 No fix listed CWE-89

TI-2023-04095 CVE-2023-4437 · GHSA-m867-f2x7-hf3g

SourceCodester Inventory Management System search_sell_paymen_report.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00674 Published 2023-08-20 No fix listed CWE-89

TI-2023-04094 CVE-2023-4436 · GHSA-3f5p-gg24-f77h

SourceCodester Inventory Management System edit_update.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-08-20 No fix listed CWE-89

TI-2023-03873 CVE-2023-4184 · GHSA-rf22-xfqf-mwjc

SourceCodester Inventory Management System sell_return.php sql injection

MEDIUM 43

A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00627 Published 2023-08-06 No fix listed CWE-89

TI-2023-03872 CVE-2023-4183 · GHSA-773v-x8cm-qjm2

SourceCodester Inventory Management System Password edit_update.php access control

MEDIUM 43

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00501 Published 2023-08-06 No fix listed CWE-284

TI-2023-03871 CVE-2023-4182 · GHSA-59wm-wr93-73pf

SourceCodester Inventory Management System edit_sell.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00627 Published 2023-08-06 No fix listed CWE-89

TI-2023-04107 CVE-2023-4449 · GHSA-qq6h-h8q7-3pg5

SourceCodester Free and Open Source Inventory Management System sql injection

LOW 39

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00788 Published 2023-08-21 No fix listed CWE-89

TI-2023-18214 CVE-2023-36338 · GHSA-p3hc-2w5x-jqgr

Inventory Management System 1 was discovered to contain a SQL injection vulnerability.

LOW 30

Inventory Management System 1 was discovered to contain a SQL injection vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00352 Published 2025-12-15 No fix listed CWE-89

TI-2023-04201 CVE-2023-4555 · GHSA-87g8-rxc8-6h32

SourceCodester Inventory Management System suppliar_data.php cross site scripting

LOW 28

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00508 Published 2023-08-27 No fix listed CWE-79

Open these records in search →

Critical	8
High	1
Medium	7
Low	0
No CVSS	0