Vulnerabilities

TI-2023-18214 CVE-2023-36338 · GHSA-p3hc-2w5x-jqgr

Inventory Management System 1 was discovered to contain a SQL injection vulnerability.

LOW 30

Inventory Management System 1 was discovered to contain a SQL injection vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00352 Published 2025-12-15 No fix listed CWE-89

TI-2023-18213 CVE-2023-36337 · GHSA-pmq2-9644-7v7w

A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of…

MEDIUM 60

A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of PHP Inventory Management System 1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00225 Published 2025-12-15 No fix listed CWE-79

TI-2023-04204 CVE-2023-4558 · GHSA-pcwg-gcmh-8wc3

SourceCodester Inventory Management System staff_data.php sql injection

MEDIUM 43

A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-08-27 No fix listed CWE-89

TI-2023-04203 CVE-2023-4557 · GHSA-h8jx-2x82-m2qp

SourceCodester Inventory Management System search_purchase_paymen_report.php sql injection

MEDIUM 43

A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00613 Published 2023-08-27 No fix listed CWE-89

TI-2023-04201 CVE-2023-4555 · GHSA-87g8-rxc8-6h32

SourceCodester Inventory Management System suppliar_data.php cross site scripting

LOW 28

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00508 Published 2023-08-27 No fix listed CWE-79

TI-2023-04107 CVE-2023-4449 · GHSA-qq6h-h8q7-3pg5

SourceCodester Free and Open Source Inventory Management System sql injection

LOW 39

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00788 Published 2023-08-21 No fix listed CWE-89

TI-2023-04096 CVE-2023-4438 · GHSA-g4qr-w38q-pxrw

SourceCodester Inventory Management System search_sales_report.php sql injection

MEDIUM 43

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00674 Published 2023-08-20 No fix listed CWE-89

TI-2023-04095 CVE-2023-4437 · GHSA-m867-f2x7-hf3g

SourceCodester Inventory Management System search_sell_paymen_report.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00674 Published 2023-08-20 No fix listed CWE-89

TI-2023-04094 CVE-2023-4436 · GHSA-3f5p-gg24-f77h

SourceCodester Inventory Management System edit_update.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-08-20 No fix listed CWE-89

TI-2023-03873 CVE-2023-4184 · GHSA-rf22-xfqf-mwjc

SourceCodester Inventory Management System sell_return.php sql injection

MEDIUM 43

A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00627 Published 2023-08-06 No fix listed CWE-89

TI-2023-03872 CVE-2023-4183 · GHSA-773v-x8cm-qjm2

SourceCodester Inventory Management System Password edit_update.php access control

MEDIUM 43

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00501 Published 2023-08-06 No fix listed CWE-284

TI-2023-03871 CVE-2023-4182 · GHSA-59wm-wr93-73pf

SourceCodester Inventory Management System edit_sell.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00627 Published 2023-08-06 No fix listed CWE-89

TI-2023-09944 CVE-2023-24234 · GHSA-2gxf-qq7x-x832

A stored cross-site scripting (XSS) vulnerability in the component…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted paylo…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0048 Published 2023-02-10 No fix listed CWE-79

TI-2023-09943 CVE-2023-24233 · GHSA-4x58-v336-8f77

A stored cross-site scripting (XSS) vulnerability in the component…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a craft…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0048 Published 2023-02-10 No fix listed CWE-79

TI-2023-09942 CVE-2023-24232 · GHSA-qr9m-j77f-86qv

A stored cross-site scripting (XSS) vulnerability in the component…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted pa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0048 Published 2023-02-10 No fix listed CWE-79

TI-2023-09941 CVE-2023-24231 · GHSA-qpv6-3r56-vvg8

A stored cross-site scripting (XSS) vulnerability in the component…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0048 Published 2023-02-10 No fix listed CWE-79

Vulnerabilities

Filters