The Inventory Management System Project maintains a web-based inventory application that, despite a narrow product scope, ranks among the more prominent open-source or widely adopted platforms in its category. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur through foundational application-layer weakness classes including SQL injection, cross-site scripting, and improper access control, reflecting the exposure inherent to web-facing data-management systems. Defenders should treat this vendor's advisories as high-priority for any deployment and prioritize input validation and access-control hardening; live exploitation status, KEV listing, and severity details are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Inventory Management System Project over time
Signals from CVEs in this vendor scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-4184CRITICAL A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sell_return.php. The | Aug 6, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-4557CRITICAL A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_purchase_paymen | Aug 27, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-4438CRITICAL A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file | Aug 20, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-4437CRITICAL A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_pay | Aug 20, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-4182CRITICAL A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file edit_sell.php. The manipula | Aug 6, 2023 | 9.8 | 28 | NO | NO |
CVE-2022-35606CRITICAL A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.' | Aug 18, 2022 | 9.8 | 28 | NO | NO |
CVE-2022-35605CRITICAL A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass | Aug 18, 2022 | 9.8 | 28 | NO | NO |
CVE-2022-35602CRITICAL A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user. | Aug 18, 2022 | 9.8 | 28 | NO | NO |
CVE-2022-35601CRITICAL A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt. | Aug 18, 2022 | 9.8 | 28 | NO | NO |
CVE-2023-4558CRITICAL A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staff_dat | Aug 27, 2023 | 9.8 | 27 | NO | NO |
Signals from CVEs in this vendor scope (28 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Inventory Management System Project.
Media articles that mention a CVE ID that affects a product developed by Inventory Management System Project — matched by CVE ID, not by vendor name.