Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:computer_parts_sales_and_inventory_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductComputer Parts Sales And Inventory System (d87df0d2-724c-5af0-bd43-6512f1c350b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1363 vulnerable 2026-06-08 05:52:35.702250 SourceCodester Computer Parts Sales and Inventory System Add User Account cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add User Account. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222870 is the identifier assigned to this vulnerability.
Published: 2023-03-13T06:00:04.143Z
Updated: 2024-08-02T05:49:10.205Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1351 vulnerable 2026-06-08 05:52:35.684927 SourceCodester Computer Parts Sales and Inventory System cust_transac.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file cust_transac.php. The manipulation of the argument phonenumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222849 was assigned to this vulnerability.
Published: 2023-03-11T11:31:03.179Z
Updated: 2024-08-02T05:41:00.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1179 vulnerable 2026-06-08 05:52:34.045768 SourceCodester Computer Parts Sales and Inventory System Add Supplier cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument company_name/province/city/phone_number leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222330 is the identifier assigned to this vulnerability.
Published: 2023-03-05T09:48:42.798Z
Updated: 2024-08-02T05:40:58.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1131 vulnerable 2026-06-08 05:52:33.932618 SourceCodester Computer Parts Sales and Inventory System customer.php cross site scripting
LOW (3.5)
A vulnerability has been found in SourceCodester Computer Parts Sales and Inventory System 1.0 and classified as problematic. This vulnerability affects unknown code of the file customer.php. The manipulation of the argument FIRST_NAME/LAST_NAME/PHONE_NUMBER leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222106 is the identifier assigned to this vulnerability.
Published: 2023-03-01T19:36:23.778Z
Updated: 2025-03-06T19:08:04.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1130 vulnerable 2026-06-08 05:52:33.931049 SourceCodester Computer Parts Sales and Inventory System processlogin sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file processlogin. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222105 was assigned to this vulnerability.
Published: 2023-03-01T19:34:48.882Z
Updated: 2024-08-02T05:32:46.381Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.