Skip to content

Product

codeastro simple inventory system vulnerabilities

3 published CVES affecting codeastro simple inventory system, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest codeastro simple inventory system CVEs

Newest publication first

  1. CVE-2025-13280 CodeAstro Simple Inventory System Login index.php sql injection

    Published
    MediumCVSS 6.9 EPSS 0.42%

    A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. Th...

  2. CVE-2025-11611 SourceCodester Simple Inventory System user.php sql injection

    Published
    MediumCVSS 5.3 EPSS 0.34%

    A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made availab...

  3. CVE-2025-11610 SourceCodester Simple Inventory System brand.php sql injection

    Published
    MediumCVSS 5.3 EPSS 0.34%

    A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has been...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.