Approved changes feed: RSS · Atom

cpe:2.3:a:free_and_open_source_inventory_management_system_project:free_and_open_source_inventory_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorFree And Open Source Inventory Management System Project (aaf89e57-322e-5272-bf03-76e3b8c416cd)
ProductFree And Open Source Inventory Management System (7f4e73c4-4053-5204-a522-7244d3ef8a3a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-51813 vulnerable 2026-06-08 06:17:54.067439 Details available
Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the staff_list parameter in the index.php component.
Published: 2024-01-30T00:00:00.000Z
Updated: 2025-06-20T19:51:14.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39714 vulnerable 2026-06-08 06:09:37.957487 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section.
Published: 2023-09-01T00:00:00.000Z
Updated: 2024-10-01T14:27:08.289Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39712 vulnerable 2026-06-08 06:09:37.957131 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section.
Published: 2023-09-08T00:00:00.000Z
Updated: 2024-09-26T17:55:18.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39711 vulnerable 2026-06-08 06:09:37.956665 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Subtotal and Paidbill parameters under the Add New Put section.
Published: 2023-09-07T00:00:00.000Z
Updated: 2024-09-26T17:40:48.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39710 vulnerable 2026-06-08 06:09:37.956283 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section.
Published: 2023-09-01T00:00:00.000Z
Updated: 2024-10-01T14:27:46.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39709 vulnerable 2026-06-08 06:09:37.955807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39708 vulnerable 2026-06-08 06:09:37.954530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39707 vulnerable 2026-06-08 06:09:37.953910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.