Simple Pos And Inventory System
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:simple_pos_and_inventory_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Simple Pos And Inventory System (1c67107d-c141-5500-bbd7-83972e6a397a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9447 |
vulnerable | 2026-06-08 08:08:58.970681 |
SourceCodester Simple POS and Inventory System search.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Simple POS and Inventory System 1.0. The impacted element is an unknown function of the file /user/search.php. Performing a manipulation of the argument Name results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Published: 2026-05-25T09:45:09.328Z
Updated: 2026-05-26T15:59:53.674Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9446 |
vulnerable | 2026-06-08 08:08:58.970418 |
SourceCodester Simple POS and Inventory System edit_customer.php sql injection
MEDIUM (4.7)
A vulnerability has been found in SourceCodester Simple POS and Inventory System 1.0. The affected element is an unknown function of the file /admin/edit_customer.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-05-25T09:30:10.408Z
Updated: 2026-05-28T17:38:20.637Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9445 |
vulnerable | 2026-06-08 08:08:58.970272 |
SourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted upload
MEDIUM (6.3)
A flaw has been found in SourceCodester Simple POS and Inventory System 1.0. Impacted is an unknown function of the file /admin/addproduct.php of the component File Extension Handler. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Published: 2026-05-25T09:15:09.554Z
Updated: 2026-05-26T14:48:19.056Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9444 |
vulnerable | 2026-06-08 08:08:58.970051 |
SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection
MEDIUM (4.7)
A vulnerability was detected in SourceCodester Simple POS and Inventory System 1.0. This issue affects the function delete of the file /admin/deleteproduct.php of the component GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Published: 2026-05-25T09:00:11.649Z
Updated: 2026-05-26T13:44:56.009Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.