simple_inventory_system vulnerabilities
CVEs whose affected-version data names the simple_inventory_system package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2025-13280High· 7.3A vulnerability was determined in CodeAstro Simple Inventory System 1.0
A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injecti…
CVE-2025-11610Medium· 6.3A security flaw has been discovered in SourceCodester Simple Inventory System 1.0
A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can…
CVE-2025-11611Medium· 6.3A weakness has been identified in SourceCodester Simple Inventory System 1.0
A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out …
CVE-2022-31340Critical· 9.8Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
CVE-2022-31339High· 7.2Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php.
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php.