Indian Invoicing System
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:indian_invoicing_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Indian Invoicing System (f67eb83e-20a1-5178-99bf-43e21597fff4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9414 |
vulnerable | 2026-06-08 08:08:58.951420 |
SourceCodester Indian Invoicing System Invoice Template Render Database-Backed add_order.php cross site scripting
LOW (3.5)
A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice Template Render Database-Backed. The manipulation of the argument customer_name results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-05-25T01:30:12.032Z
Updated: 2026-05-26T14:40:40.437Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9413 |
vulnerable | 2026-06-08 08:08:58.951126 |
SourceCodester Indian Invoicing System category.php cross site scripting
MEDIUM (4.3)
A vulnerability was identified in SourceCodester Indian Invoicing System 1.0. The affected element is an unknown function of the file /Invoicing/category.php. The manipulation of the argument msg leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.
Published: 2026-05-25T01:15:10.056Z
Updated: 2026-05-26T13:21:50.367Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9412 |
vulnerable | 2026-06-08 08:08:58.950973 |
SourceCodester Indian Invoicing System Backend Endpoint access control
MEDIUM (6.3)
A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Impacted is an unknown function of the component Backend Endpoint. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Multiple endpoints are affected.
Published: 2026-05-25T01:00:14.997Z
Updated: 2026-05-27T19:37:20.708Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9411 |
vulnerable | 2026-06-08 08:08:58.950745 |
SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGST_Invoice.php of the component Invoice Generation Handler. Performing a manipulation of the argument customer_name/category results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Published: 2026-05-25T00:45:11.931Z
Updated: 2026-05-26T16:09:49.068Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.