Vulnerabilities

TI-2009-04353 CVE-2009-4597 · GHSA-9fqw-8r6r-h742

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote…

LOW 35

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the user_id parameter in a users details action, and allow remote attack…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00987 Published 2010-01-12 No fix listed CWE-89

TI-2009-04352 CVE-2009-4596 · GHSA-m5v6-9jrr-fjvr

Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary web script or HTML via the sup_id parameter in a suppliers details action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01475 Published 2010-01-12 No fix listed CWE-79

TI-2009-04351 CVE-2009-4595 · GHSA-jw3g-x4rr-j3x2

SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated…

LOW 28

SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated users to execute arbitrary SQL commands via the sup_id parameter in a suppliers details action.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00725 Published 2010-01-12 No fix listed CWE-89

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote…

Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote…

SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated…