Approved changes feed: RSS · Atom

cpe:2.3:a:simple_inventory_system_project:simple_inventory_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorSimple Inventory System Project (d15083fd-ccad-588e-91fe-846f26644dff)
ProductSimple Inventory System (604b3ef3-a261-587f-9dc1-fe9c7778d8c6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5098 vulnerable 2026-06-08 06:56:14.905523 SourceCodester Simple Inventory System login.php sql injection
MEDIUM (5.5)
A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-265081 was assigned to this vulnerability.
Published: 2024-05-19T06:00:04.313Z
Updated: 2024-08-01T21:03:10.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5097 vulnerable 2026-06-08 06:56:14.902888 SourceCodester Simple Inventory System tableedit.php#page=editprice cross-site request forgery
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Inventory System 1.0. Affected is an unknown function of the file /tableedit.php#page=editprice. The manipulation of the argument itemnumber leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265080.
Published: 2024-05-19T03:00:04.179Z
Updated: 2024-08-01T21:03:10.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31340 vulnerable 2026-06-08 05:43:40.728224 Details available
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
Published: 2022-06-01T13:21:21.000Z
Updated: 2024-08-03T07:19:05.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31339 vulnerable 2026-06-08 05:43:40.727683 Details available
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php.
Published: 2022-06-01T13:22:45.000Z
Updated: 2024-08-03T07:19:05.758Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.