Vulnerabilities

TI-2024-04737 CVE-2024-5101 · GHSA-wh2x-972h-6xmh

SourceCodester Simple Inventory System updateproduct.php sql injection

MEDIUM 57

A vulnerability was found in SourceCodester Simple Inventory System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00614 Published 2024-05-19 No fix listed CWE-89

TI-2024-04736 CVE-2024-5100 · GHSA-h46v-63q8-chhv

MEDIUM 57

A vulnerability was found in SourceCodester Simple Inventory System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0049 Published 2024-05-19 No fix listed CWE-89

TI-2024-04735 CVE-2024-5099 · GHSA-89qm-pg8x-wj9m

MEDIUM 57

A vulnerability was found in SourceCodester Simple Inventory System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0049 Published 2024-05-19 No fix listed CWE-89

TI-2024-04734 CVE-2024-5098 · GHSA-7v78-784x-w6p3

MEDIUM 56

A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00484 Published 2024-05-19 No fix listed CWE-89

TI-2024-04733 CVE-2024-5097 · GHSA-gcmx-rh8w-85v2

MEDIUM 64

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Inventory System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00373 Published 2024-05-19 No fix listed CWE-352

TI-2022-13336 CVE-2022-31339 · GHSA-9fmq-vhph-37h6

LOW 34

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01032 Published 2022-06-01 No fix listed CWE-89

TI-2022-13337 CVE-2022-31340 · GHSA-4jm2-q7gv-xrg4

MEDIUM 44

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01165 Published 2022-06-01 No fix listed CWE-89