Inventory Management System

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:inventory_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductInventory Management System (2659ce40-0c8d-5497-99f5-20a77ccdcd16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-13570 vulnerable 2026-07-29 00:23:33.189502 SourceCodester Inventory Management System User Registration Endpoint users_handler.php cross site scripting
LOW (3.5)
A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users_handler.php of the component User Registration Endpoint. Performing a manipulation of the argument full_name results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2026-06-29T13:15:07.283Z
Updated: 2026-06-29T13:57:51.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13568 vulnerable 2026-07-29 00:23:33.188208 SourceCodester Inventory Management System User Registration Endpoint users_handler.php access control
HIGH (7.3)
A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users_handler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Published: 2026-06-29T12:45:07.960Z
Updated: 2026-07-01T14:00:47.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14229 vulnerable 2026-06-08 07:06:33.916394 SourceCodester Inventory Management System SVC Report Export csv injection
MEDIUM (4.7)
A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-12-08T11:02:06.822Z
Updated: 2025-12-08T17:09:45.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13565 vulnerable 2026-06-08 07:04:32.516654 SourceCodester Inventory Management System resetPassword.php password recovery
MEDIUM (5.3)
A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
Published: 2025-11-23T19:02:06.406Z
Updated: 2025-11-24T21:18:41.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9323 vulnerable 2026-06-08 07:00:27.125411 SourceCodester Inventory Management System add_staff.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/action/add_staff.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-29T06:31:06.002Z
Updated: 2024-09-30T19:19:12.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4749 vulnerable 2026-06-08 06:16:14.491525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4558 vulnerable 2026-06-08 06:16:12.986302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4557 vulnerable 2026-06-08 06:16:12.985899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4555 vulnerable 2026-06-08 06:16:12.979696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4438 vulnerable 2026-06-08 06:16:12.367207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4437 vulnerable 2026-06-08 06:16:12.366758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4436 vulnerable 2026-06-08 06:16:12.366399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4201 vulnerable 2026-06-08 06:16:11.759840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4200 vulnerable 2026-06-08 06:16:11.759347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4199 vulnerable 2026-06-08 06:16:11.757184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4184 vulnerable 2026-06-08 06:16:11.722706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4183 vulnerable 2026-06-08 06:16:11.722074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4182 vulnerable 2026-06-08 06:16:11.720877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.