GCVE - cpe:2.3:a:computer_parts_sales_and_inventory_system_project:computer_parts_sales_and_inventory

Approved changes feed: RSS · Atom

cpe:2.3:a:computer_parts_sales_and_inventory_system_project:computer_parts_sales_and_inventory_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Computer Parts Sales And Inventory System Project (`bb050755-6512-5f9a-82b4-a8b06296854b`)
Product	Computer Parts Sales And Inventory System (`3cfe4fa5-6246-51f6-bd38-ae04fd7d2455`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/samcjdeveloper/computer-parts-sales-and-inventory-system-using-php-mysql`	purl2cpe	2026-06-01 10:12:34.898169

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-1363`	vulnerable	2026-06-08 05:52:35.702283	SourceCodester Computer Parts Sales and Inventory System Add User Account cross site scripting LOW (3.5) A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add User Account. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222870 is the identifier assigned to this vulnerability. Published: 2023-03-13T06:00:04.143Z Updated: 2024-08-02T05:49:10.205Z Open on db.gcve.eu Reference links https://vuldb.com/?id.222870 https://vuldb.com/?ctiid.222870 https://github.com/Songs-YZS/CveList/blob/main/Computer-Parts-Sales-and-Inventory-System-has-Cross-Site-Scriptin-vulnerability.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1351`	vulnerable	2026-06-08 05:52:35.685051	SourceCodester Computer Parts Sales and Inventory System cust_transac.php sql injection MEDIUM (6.3) A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file cust_transac.php. The manipulation of the argument phonenumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222849 was assigned to this vulnerability. Published: 2023-03-11T11:31:03.179Z Updated: 2024-08-02T05:41:00.217Z Open on db.gcve.eu Reference links https://vuldb.com/?id.222849 https://vuldb.com/?ctiid.222849 https://github.com/chenxing0903/CveHub/blob/main/Computer-Parts-Sales-And-Inventory-System-Sql-Vulnerability.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1179`	vulnerable	2026-06-08 05:52:34.045799	SourceCodester Computer Parts Sales and Inventory System Add Supplier cross site scripting LOW (3.5) A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument company_name/province/city/phone_number leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222330 is the identifier assigned to this vulnerability. Published: 2023-03-05T09:48:42.798Z Updated: 2024-08-02T05:40:58.273Z Open on db.gcve.eu Reference links https://vuldb.com/?id.222330 https://vuldb.com/?ctiid.222330 https://github.com/Amat0eur/MyCve/blob/main/Computer-Parts-Sales-And-Inventory-System-Xss.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1131`	vulnerable	2026-06-08 05:52:33.932662	SourceCodester Computer Parts Sales and Inventory System customer.php cross site scripting LOW (3.5) A vulnerability has been found in SourceCodester Computer Parts Sales and Inventory System 1.0 and classified as problematic. This vulnerability affects unknown code of the file customer.php. The manipulation of the argument FIRST_NAME/LAST_NAME/PHONE_NUMBER leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222106 is the identifier assigned to this vulnerability. Published: 2023-03-01T19:36:23.778Z Updated: 2025-03-06T19:08:04.238Z Open on db.gcve.eu Reference links https://vuldb.com/?id.222106 https://vuldb.com/?ctiid.222106 https://github.com/WhiteA1so/Cvetest/blob/main/1.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1130`	vulnerable	2026-06-08 05:52:33.932006	SourceCodester Computer Parts Sales and Inventory System processlogin sql injection MEDIUM (6.3) A vulnerability, which was classified as critical, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file processlogin. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222105 was assigned to this vulnerability. Published: 2023-03-01T19:34:48.882Z Updated: 2024-08-02T05:32:46.381Z Open on db.gcve.eu Reference links https://vuldb.com/?id.222105 https://vuldb.com/?ctiid.222105 https://github.com/WhiteA1so/Cvetest/blob/main/Sql1.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Computer Parts Sales And Inventory System Project Computer Parts Sales And Inventory System 1.0

Notes

PURL mappings

Vulnerability references

Contribute