Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:inventory_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductInventory Management System (2659ce40-0c8d-5497-99f5-20a77ccdcd16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-90696 vulnerable 2026-09-16 04:33:05.555584 SourceCodester Inventory Management System Product Management products_handler.php cross site scripting
LOW (3.5)
A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products_handler.php of the component Product Management Module. Executing a manipulation of the argument Product_Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Published: 2026-09-14T08:00:11.558Z
Updated: 2026-09-14T14:38:47.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-90697 vulnerable 2026-09-16 04:33:05.509859 SourceCodester Inventory Management System invoice.php authorization
MEDIUM (4.3)
A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Published: 2026-09-14T08:15:08.100Z
Updated: 2026-09-15T13:57:45.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-90695 vulnerable 2026-09-16 04:33:05.410403 SourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendors_handler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Published: 2026-09-14T07:45:08.133Z
Updated: 2026-09-16T14:49:33.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-90694 vulnerable 2026-09-16 04:33:05.237686 SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting
LOW (3.5)
A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customers_handler.php of the component Customer Management Module. Such manipulation of the argument Customer_Name leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-09-14T07:30:08.455Z
Updated: 2026-09-14T10:40:03.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13570 vulnerable 2026-07-29 00:23:33.189502 SourceCodester Inventory Management System User Registration Endpoint users_handler.php cross site scripting
LOW (3.5)
A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users_handler.php of the component User Registration Endpoint. Performing a manipulation of the argument full_name results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2026-06-29T13:15:07.283Z
Updated: 2026-06-29T13:57:51.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13568 vulnerable 2026-07-29 00:23:33.188208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14229 vulnerable 2026-06-08 07:06:33.916394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13565 vulnerable 2026-06-08 07:04:32.516654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9323 vulnerable 2026-06-08 07:00:27.125411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4749 vulnerable 2026-06-08 06:16:14.491525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4558 vulnerable 2026-06-08 06:16:12.986302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4557 vulnerable 2026-06-08 06:16:12.985899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4555 vulnerable 2026-06-08 06:16:12.979696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4438 vulnerable 2026-06-08 06:16:12.367207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4437 vulnerable 2026-06-08 06:16:12.366758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4436 vulnerable 2026-06-08 06:16:12.366399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4201 vulnerable 2026-06-08 06:16:11.759840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4200 vulnerable 2026-06-08 06:16:11.759347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4199 vulnerable 2026-06-08 06:16:11.757184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4184 vulnerable 2026-06-08 06:16:11.722706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4183 vulnerable 2026-06-08 06:16:11.722074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4182 vulnerable 2026-06-08 06:16:11.720877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.