GCVE - cpe:2.3:a:mayurik:inventory_management

Approved changes feed: RSS · Atom

cpe:2.3:a:mayurik:inventory_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Mayurik (`727a23cf-b3c3-54bf-b09e-da411a18e16c`)
Product	Inventory Management System (`6b7d3f25-e73e-511f-add0-30e535c31af4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/yesec/inventory-management-system`	purl2cpe	2026-06-01 10:15:01.138438

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-4749`	vulnerable	2026-06-03 14:53:29.584566	SourceCodester Inventory Management System index.php file inclusion MEDIUM (6.3) A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238638 is the identifier assigned to this vulnerability. Published: 2023-09-04T00:31:04.684Z Updated: 2024-08-02T07:37:59.644Z Open on db.gcve.eu Reference links https://vuldb.com/?id.238638 https://vuldb.com/?ctiid.238638 https://skypoc.wordpress.com/2023/09/03/%e3%80%90code-audit%e3%80%91open-source-ample-inventory-management-system-v1-0-by-mayuri_k-has-a-file-inclusion-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4201`	vulnerable	2026-06-03 14:53:27.508654	SourceCodester Inventory Management System ex_catagory_data.php sql injection MEDIUM (6.3) A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file ex_catagory_data.php. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236291. Published: 2023-08-07T19:31:03.649Z Updated: 2024-08-02T07:17:12.054Z Open on db.gcve.eu Reference links https://vuldb.com/?id.236291 https://vuldb.com/?ctiid.236291 https://github.com/Yesec/Inventory-Management-System/blob/main/SQL%20Injection%20in%20ex_catagory_data.php/vuln.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4200`	vulnerable	2026-06-03 14:53:27.508298	SourceCodester Inventory Management System product_data.php. sql injection MEDIUM (6.3) A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file product_data.php.. The manipulation of the argument columns[1][data] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-236290 is the identifier assigned to this vulnerability. Published: 2023-08-07T18:31:03.795Z Updated: 2024-08-02T07:17:12.203Z Open on db.gcve.eu Reference links https://vuldb.com/?id.236290 https://vuldb.com/?ctiid.236290 https://github.com/Yesec/Inventory-Management-System/blob/main/SQL%20Injection%20in%20product_data.php/vuln.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4199`	vulnerable	2026-06-03 14:53:27.507797	SourceCodester Inventory Management System catagory_data.php sql injection MEDIUM (6.3) A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file catagory_data.php. The manipulation of the argument columns[1][data] leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236289 was assigned to this vulnerability. Published: 2023-08-07T17:31:03.682Z Updated: 2024-08-02T07:17:12.328Z Open on db.gcve.eu Reference links https://vuldb.com/?id.236289 https://vuldb.com/?ctiid.236289 https://github.com/Yesec/Inventory-Management-System/blob/main/SQL%20Injection%20in%20catagory_data.php/vuln.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46450`	vulnerable	2026-06-03 14:53:10.045197	Details available Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier function. Published: 2023-10-26T00:00:00.000Z Updated: 2024-09-12T20:42:54.380Z Open on db.gcve.eu Reference links https://youtu.be/LQy0_xIK2q0 https://github.com/yte121/-CVE-2023-46450/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46449`	vulnerable	2026-06-03 14:53:10.044795	Details available Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function. Published: 2023-10-26T00:00:00.000Z Updated: 2024-09-12T20:43:35.051Z Open on db.gcve.eu Reference links https://github.com/sajaljat/CVE-2023-46449/tree/main https://www.youtube.com/watch?v=H5QnsOKjs3s	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Mayurik Inventory Management System 1.0

PURL mappings

Vulnerability references

Contribute