Inventorymanagementsystem Project maintains a focused inventory management application whose vulnerability profile skews strongly toward critical-severity outcomes. The recurring weakness centers on SQL injection flaws in the product's data-handling layer, a pattern that reflects the application's database-intensive architecture and poses substantial risk to deployments managing sensitive business inventory. Live severity, exploitation status, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Inventorymanagementsystem Project over time
Signals from CVEs in this vendor scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-4184CRITICAL A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sell_return.php. The | Aug 6, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-4557CRITICAL A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_purchase_paymen | Aug 27, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-4438CRITICAL A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file | Aug 20, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-4437CRITICAL A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_pay | Aug 20, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-4182CRITICAL A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file edit_sell.php. The manipula | Aug 6, 2023 | 9.8 | 28 | NO | NO |
CVE-2022-35606CRITICAL A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameter 'customerCode.' | Aug 18, 2022 | 9.8 | 28 | NO | NO |
CVE-2022-35605CRITICAL A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as 'users', 'pass | Aug 18, 2022 | 9.8 | 28 | NO | NO |
CVE-2022-35602CRITICAL A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user. | Aug 18, 2022 | 9.8 | 28 | NO | NO |
CVE-2022-35601CRITICAL A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter searchTxt. | Aug 18, 2022 | 9.8 | 28 | NO | NO |
CVE-2023-4558CRITICAL A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staff_dat | Aug 27, 2023 | 9.8 | 27 | NO | NO |
Signals from CVEs in this vendor scope (28 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Inventorymanagementsystem Project.
Media articles that mention a CVE ID that affects a product developed by Inventorymanagementsystem Project — matched by CVE ID, not by vendor name.