Approved changes feed: RSS · Atom

cpe:2.3:a:oswapp:warehouse_inventory_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOswapp (a0f63430-e86b-5ab6-b02a-143e5ce177ae)
ProductWarehouse Inventory System (996d0348-ea9a-55c2-8b42-7f8c915c05c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/siamon123/warehouse-inventory-system purl2cpe 2026-06-01 10:15:30.038423

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7460 vulnerable 2026-06-08 06:58:22.228401 OSWAPP Warehouse Inventory System change_password.php cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change_password.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273553 was assigned to this vulnerability.
Published: 2024-08-04T23:00:08.599Z
Updated: 2024-08-05T14:48:53.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7459 vulnerable 2026-06-08 06:58:22.226317 OSWAPP Warehouse Inventory System edit_account.php cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /edit_account.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273552.
Published: 2024-08-04T22:31:03.567Z
Updated: 2024-08-07T18:27:26.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42581 vulnerable 2026-06-08 06:45:46.751087 Details available
A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
Published: 2024-08-20T00:00:00.000Z
Updated: 2024-08-20T20:17:22.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42580 vulnerable 2026-06-08 06:45:46.750643 Details available
A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
Published: 2024-08-20T00:00:00.000Z
Updated: 2024-08-20T18:48:52.459Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42578 vulnerable 2026-06-08 06:45:46.749638 Details available
A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
Published: 2024-08-20T00:00:00.000Z
Updated: 2024-08-20T14:04:41.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23836 vulnerable 2026-06-08 05:22:32.138115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.