rizwan17 vulnerabilities

Products

• inventory-management-system 9

Latest rizwan17 CVEs

Newest publication first

1. CVE-2026-90599 Rizwan17 inventory-management-system process.php cross-site request forgery

   Published 2026-09-13

   Medium·CVSS 5.3 EPSS 0.24%

   A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. This affects an unknown function of the file includes/process.php. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack re...

2. CVE-2026-90566 Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization

   Published 2026-09-13

   Medium·CVSS 6.9 EPSS 0.47%

   A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of the file register.php of the component Registration Handler. Executing a manipulation of the...

3. CVE-2026-90565 Rizwan17 inventory-management-system dashboard.php access control

   Published 2026-09-13

   Medium·CVSS 6.9 EPSS 0.53%

   A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possi...

4. CVE-2026-87926 Rizwan17 inventory-management-system Login Page index.php cross site scripting

   Published 2026-09-09

   Medium·CVSS 5.3 EPSS 0.47%

   A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scriptin...

5. CVE-2026-87925 Rizwan17 inventory-management-system manage.php storeCustomerOrderInvoice sql injection

   Published 2026-09-09

   Medium·CVSS 6.9 EPSS 0.43%

   A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This vulnerability affects the function storeCustomerOrderInvoice of the file includes/manage.php. Performing a manipulation of the argument pro_name[] results in...

6. CVE-2026-87924 Rizwan17 inventory-management-system Invoice Generation invoice_bill.php missing authentication

   Published 2026-09-09

   Medium·CVSS 6.9 EPSS 0.76%

   A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file includes/invoice_bill.php of the component Invoice Generation. Such manipulation of the argument order_date/...

7. CVE-2026-87923 Rizwan17 inventory-management-system List DBOperation.php cross site scripting

   Published 2026-09-09

   Medium·CVSS 5.3 EPSS 0.47%

   A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the file includes/DBOperation.php of the component List Handler. This manipulation of the argument catego...

8. CVE-2026-87922 Rizwan17 inventory-management-system AJAX Backend process.php DBOperation.addCategory missing authentication

   Published 2026-09-09

   Medium·CVSS 6.9 EPSS 0.69%

   A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function DBOperation.addCategory of the file includes/process.php of the component AJAX Backend. The manipulation of t...

9. CVE-2026-87921 Rizwan17 inventory-management-system manage.php update_record sql injection

   Published 2026-09-09

   Medium·CVSS 6.9 EPSS 0.43%

   A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function update_record of the file includes/manage.php. The manipulation of the argument update_category/cid/update_brand/update_product leads to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.