Code-projects

Inventory Management

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-11250

Exploit
  • EPSS 0.14%
  • Published 15.11.2024 18:15:26
  • Last modified 10.12.2024 17:22:10

A vulnerability was found in code-projects Inventory Management up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /model/editProduct.php. The manipulation of the argument id leads to sql injection. The a...

8.8

CVE-2024-8710

Exploit
  • EPSS 0.16%
  • Published 12.09.2024 03:15:05
  • Last modified 13.09.2024 16:25:47

A vulnerability classified as critical was found in code-projects Inventory Management 1.0. Affected by this vulnerability is an unknown functionality of the file /model/viewProduct.php of the component Products Table Page. The manipulation of the ar...

5.4

CVE-2024-8605

Exploit
  • EPSS 0.05%
  • Published 09.09.2024 16:15:03
  • Last modified 13.09.2024 15:31:52

A vulnerability classified as problematic was found in code-projects Inventory Management 1.0. This vulnerability affects unknown code of the file /view/registration.php of the component Registration Form. The manipulation with the input <script>aler...

5.4

CVE-2023-46580

Exploit
  • EPSS 0.18%
  • Published 14.11.2023 22:15:30
  • Last modified 21.11.2024 08:28:47

Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component.

5.5

CVE-2023-46581

Exploit
  • EPSS 0.06%
  • Published 14.11.2023 22:15:30
  • Last modified 21.11.2024 08:28:47

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component.

7.8

CVE-2023-46582

Exploit
  • EPSS 0.08%
  • Published 14.11.2023 22:15:30
  • Last modified 21.11.2024 08:28:48

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component.