sourcecodester stock management system vulnerabilities

Latest sourcecodester stock management system CVEs

Newest publication first

1. CVE-2026-78060 SourceCodester Stock Management System getOrderReport.php cross site scripting

   Published 2026-08-23

   Medium·CVSS 5.3 EPSS 0.47%

   A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /php_action/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to in...

2. CVE-2026-78059 SourceCodester Stock Management System printOrder.php cross site scripting

   Published 2026-08-23

   Medium·CVSS 5.3 EPSS 0.47%

   A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /php_action/printOrder.php. Such manipulation of the argument clientName/clientContact leads to cross site scripting. The attack may be performed from...

3. CVE-2026-19925 SourceCodester Stock Management System Master.php delete_supplier sql injection

   Published 2026-08-16

   Medium·CVSS 5.1 EPSS 0.35%

   A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=delete_supplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit...

4. CVE-2025-4935 SourceCodester Stock Management System changePassword.php sql injection

   Published 2025-05-19

   Medium·CVSS 6.9 EPSS 0.56%

   A vulnerability was found in SourceCodester Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php_action/changePassword.php. The manipulation of the argument user_id leads to sql injection. The attack may be initiated...

5. CVE-2025-4806 SourceCodester/oretnom23 Stock Management System view_bo sql injection

   Published 2025-05-16

   Medium·CVSS 5.3 EPSS 0.53%

   A vulnerability, which was classified as critical, has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=back_order/view_bo. The manipulation of the argument ID leads to sql injection....

6. CVE-2025-4787 SourceCodester/oretnom23 Stock Management System view_sale sql injection

   Published 2025-05-16

   Medium·CVSS 5.3 EPSS 0.53%

   A vulnerability classified as critical has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected is an unknown function of the file /admin/?page=sales/view_sale. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack...

7. CVE-2025-4786 SourceCodester/oretnom23 Stock Management System view_return sql injection

   Published 2025-05-16

   Medium·CVSS 5.3 EPSS 0.54%

   A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/?page=return/view_return. The manipulation of the argument ID leads to sql injection. The attack may be...

8. CVE-2025-4782 SourceCodester/oretnom23 Stock Management System view_receiving sql injection

   Published 2025-05-16

   Medium·CVSS 5.3 EPSS 0.66%

   A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /sms/admin/?page=receiving/view_receiving&id=1. The manipulation of the argument ID leads to sql injection. The a...

9. CVE-2025-4283 SourceCodester/oretnom23 Stock Management System Login.php sql injection

   Published 2025-05-05

   Medium·CVSS 6.9 EPSS 0.66%

   A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Login.php?f=login. The manipulation of the argument Username leads to sql injection. The attack may be ini...

10. CVE-2025-4282 SourceCodester/oretnom23 Stock Management System Users.php cross-site request forgery

    Published 2025-05-05

    Medium·CVSS 5.3 EPSS 0.35%

    A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=save. The manipulation leads to cross-site request forgery. The attack can be initiated r...

11. CVE-2025-4267 SourceCodester/oretnom23 Stock Management System Purchase Order Details Page view_po sql injection

    Published 2025-05-05

    Medium·CVSS 5.1 EPSS 0.50%

    A vulnerability, which was classified as critical, was found in SourceCodester/oretnom23 Stock Management System 1.0. This affects an unknown part of the file /admin/?page=purchase_order/view_po of the component Purchase Order Details Page. The manipulation of the argument ID lea...

12. CVE-2024-5774 SourceCodester Stock Management System Login index.php sql injection

    Published 2024-06-09

    Medium·CVSS 6.9 EPSS 0.66%

    A vulnerability has been found in SourceCodester Stock Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument username/password leads to sql inject...

13. CVE-2024-5515 SourceCodester Stock Management System createBrand.php sql injection

    Published 2024-05-30

    Medium·CVSS 5.3 EPSS 0.64%

    A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is an unknown function of the file createBrand.php. The manipulation of the argument brandName leads to sql injection. It is possible to launch the attack remotel...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.