https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-36338.htmlhttps://patchthecve.com/cve/CVE-2023-36338.htmlWed, 17 Jun 2026 06:06:03 +0000MEDIUM 5.3: Inventory Management System 1 was discovered to contain a SQL injection vulnerability.https://patchthecve.com/cve/CVE-2023-36337.htmlhttps://patchthecve.com/cve/CVE-2023-36337.htmlWed, 17 Jun 2026 06:06:03 +0000MEDIUM 6.1: A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of PHP Inventory Management System 1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.https://patchthecve.com/cve/CVE-2025-14229.htmlhttps://patchthecve.com/cve/CVE-2025-14229.htmlWed, 07 Oct 2026 20:10:01 +0000MEDIUM 4.7: A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed publiclhttps://patchthecve.com/cve/CVE-2025-13565.htmlhttps://patchthecve.com/cve/CVE-2025-13565.htmlThu, 08 Oct 2026 10:10:00 +0000MEDIUM 5.3: A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made availhttps://patchthecve.com/cve/CVE-2025-13257.htmlhttps://patchthecve.com/cve/CVE-2025-13257.htmlWed, 07 Oct 2026 21:10:00 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-13237.htmlhttps://patchthecve.com/cve/CVE-2025-13237.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.3: A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument U_USERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public ahttps://patchthecve.com/cve/CVE-2025-13236.htmlhttps://patchthecve.com/cve/CVE-2025-13236.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.3: A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and mihttps://patchthecve.com/cve/CVE-2025-13235.htmlhttps://patchthecve.com/cve/CVE-2025-13235.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.3: A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument user_email can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly dischttps://patchthecve.com/cve/CVE-2025-13234.htmlhttps://patchthecve.com/cve/CVE-2025-13234.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.3: A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been made phttps://patchthecve.com/cve/CVE-2025-13233.htmlhttps://patchthecve.com/cve/CVE-2025-13233.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to thhttps://patchthecve.com/cve/CVE-2025-13210.htmlhttps://patchthecve.com/cve/CVE-2025-13210.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 4.7: A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=add. Such manipulation of the argument PROMODEL leads to sql injection. The attack may be performed from remote. The exploit has beehttps://patchthecve.com/cve/CVE-2025-6902.htmlhttps://patchthecve.com/cve/CVE-2025-6902.htmlWed, 17 Jun 2026 10:02:50 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /php_action/editUser.php. The manipulation of the argument edituserName leads to sql injection. It is possible to launch the attack remotely. Thhttps://patchthecve.com/cve/CVE-2025-6901.htmlhttps://patchthecve.com/cve/CVE-2025-6901.htmlWed, 17 Jun 2026 10:02:49 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php_action/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit https://patchthecve.com/cve/CVE-2025-6891.htmlhttps://patchthecve.com/cve/CVE-2025-6891.htmlWed, 17 Jun 2026 10:02:48 +0000HIGH 7.3: A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0. Affected is an unknown function of the file /php_action/createUser.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit https://patchthecve.com/cve/CVE-2025-6834.htmlhttps://patchthecve.com/cve/CVE-2025-6834.htmlWed, 17 Jun 2026 10:02:39 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /php_action/editPayment.php. The manipulation of the argument orderId leads to sql injection. The attack can be initiated remotely. The exhttps://patchthecve.com/cve/CVE-2025-6828.htmlhttps://patchthecve.com/cve/CVE-2025-6828.htmlWed, 17 Jun 2026 10:02:38 +0000HIGH 7.3: A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /orders.php. The manipulation of the argument i leads to sql injection. The attack can be initiated remotely. The exploit has been disclosedhttps://patchthecve.com/cve/CVE-2025-6827.htmlhttps://patchthecve.com/cve/CVE-2025-6827.htmlWed, 17 Jun 2026 10:02:38 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /php_action/editOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed thttps://patchthecve.com/cve/CVE-2025-6823.htmlhttps://patchthecve.com/cve/CVE-2025-6823.htmlWed, 17 Jun 2026 10:02:37 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /php_action/editProduct.php. The manipulation of the argument editProductName leads to sql injection. The attack may be initiated remotelyhttps://patchthecve.com/cve/CVE-2025-6822.htmlhttps://patchthecve.com/cve/CVE-2025-6822.htmlWed, 17 Jun 2026 10:02:37 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /php_action/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely. Thhttps://patchthecve.com/cve/CVE-2025-6821.htmlhttps://patchthecve.com/cve/CVE-2025-6821.htmlWed, 17 Jun 2026 10:02:37 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /php_action/createOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosehttps://patchthecve.com/cve/CVE-2025-6820.htmlhttps://patchthecve.com/cve/CVE-2025-6820.htmlWed, 17 Jun 2026 10:02:37 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /php_action/createProduct.php. The manipulation of the argument productName leads to sql injection. The attack may be launched remothttps://patchthecve.com/cve/CVE-2025-6819.htmlhttps://patchthecve.com/cve/CVE-2025-6819.htmlWed, 17 Jun 2026 10:02:37 +0000HIGH 7.3: A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /php_action/removeBrand.php. The manipulation of the argument brandId leads to sql injection. The attack can be launched https://patchthecve.com/cve/CVE-2025-6668.htmlhttps://patchthecve.com/cve/CVE-2025-6668.htmlWed, 17 Jun 2026 10:02:21 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /php_action/fetchSelectedBrand.php. The manipulation of the argument brandId leads to sql injection. It is possible to initiate the attack remotelyhttps://patchthecve.com/cve/CVE-2025-6665.htmlhttps://patchthecve.com/cve/CVE-2025-6665.htmlWed, 17 Jun 2026 10:02:20 +0000HIGH 7.3: A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /php_action/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection. The attack can be lauhttps://patchthecve.com/cve/CVE-2025-6612.htmlhttps://patchthecve.com/cve/CVE-2025-6612.htmlWed, 17 Jun 2026 10:02:15 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /php_action/removeCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated remotehttps://patchthecve.com/cve/CVE-2025-6611.htmlhttps://patchthecve.com/cve/CVE-2025-6611.htmlWed, 17 Jun 2026 10:02:14 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /php_action/createBrand.php. The manipulation of the argument brandStatus leads to sql injection. The attack can be initiated remotely. Thhttps://patchthecve.com/cve/CVE-2025-6503.htmlhttps://patchthecve.com/cve/CVE-2025-6503.htmlWed, 17 Jun 2026 10:02:02 +0000HIGH 7.3: A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php_action/fetchSelectedCategories.php. The manipulation of the argument categoriesId leads to sql injection. The attack may be initiated remhttps://patchthecve.com/cve/CVE-2025-6502.htmlhttps://patchthecve.com/cve/CVE-2025-6502.htmlWed, 17 Jun 2026 10:02:01 +0000HIGH 7.3: A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php_action/changePassword.php. The manipulation of the argument user_id leads to sql injection. The attack can be initiated remotely. The ehttps://patchthecve.com/cve/CVE-2025-6501.htmlhttps://patchthecve.com/cve/CVE-2025-6501.htmlWed, 17 Jun 2026 10:02:01 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /php_action/createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. It is possible to initiate the attack rehttps://patchthecve.com/cve/CVE-2025-6500.htmlhttps://patchthecve.com/cve/CVE-2025-6500.htmlWed, 17 Jun 2026 10:02:01 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in code-projects Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /php_action/editCategories.php. The manipulation of the argument editCategoriesName leads to sql injection. The attack https://patchthecve.com/cve/CVE-2025-6474.htmlhttps://patchthecve.com/cve/CVE-2025-6474.htmlWed, 17 Jun 2026 10:01:58 +0000HIGH 7.3: A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeUsername.php. The manipulation of the argument user_id leads to sql injection. The attack can be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2023-46450.htmlhttps://patchthecve.com/cve/CVE-2023-46450.htmlWed, 17 Jun 2026 06:30:54 +0000MEDIUM 5.4: Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier function.https://patchthecve.com/cve/CVE-2023-46449.htmlhttps://patchthecve.com/cve/CVE-2023-46449.htmlWed, 17 Jun 2026 06:30:53 +0000HIGH 8.8: Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.