<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: warehouse inventory system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-42586: A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows a</title><link>https://patchthecve.com/cve/CVE-2024-42586.html</link><guid>https://patchthecve.com/cve/CVE-2024-42586.html</guid><pubDate>Wed, 17 Jun 2026 07:49:42 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42585: A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allow</title><link>https://patchthecve.com/cve/CVE-2024-42585.html</link><guid>https://patchthecve.com/cve/CVE-2024-42585.html</guid><pubDate>Wed, 17 Jun 2026 07:49:42 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42584: A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 all</title><link>https://patchthecve.com/cve/CVE-2024-42584.html</link><guid>https://patchthecve.com/cve/CVE-2024-42584.html</guid><pubDate>Wed, 17 Jun 2026 07:49:42 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42583: A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows</title><link>https://patchthecve.com/cve/CVE-2024-42583.html</link><guid>https://patchthecve.com/cve/CVE-2024-42583.html</guid><pubDate>Wed, 17 Jun 2026 07:49:42 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42582: A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 a</title><link>https://patchthecve.com/cve/CVE-2024-42582.html</link><guid>https://patchthecve.com/cve/CVE-2024-42582.html</guid><pubDate>Wed, 17 Jun 2026 07:49:42 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42581: A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allow</title><link>https://patchthecve.com/cve/CVE-2024-42581.html</link><guid>https://patchthecve.com/cve/CVE-2024-42581.html</guid><pubDate>Wed, 17 Jun 2026 07:49:42 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42580: A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows </title><link>https://patchthecve.com/cve/CVE-2024-42580.html</link><guid>https://patchthecve.com/cve/CVE-2024-42580.html</guid><pubDate>Wed, 17 Jun 2026 07:49:42 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42579: A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows a</title><link>https://patchthecve.com/cve/CVE-2024-42579.html</link><guid>https://patchthecve.com/cve/CVE-2024-42579.html</guid><pubDate>Wed, 17 Jun 2026 07:49:41 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42578: A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allow</title><link>https://patchthecve.com/cve/CVE-2024-42578.html</link><guid>https://patchthecve.com/cve/CVE-2024-42578.html</guid><pubDate>Wed, 17 Jun 2026 07:49:41 +0000</pubDate><description>HIGH 8.0: A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42577: A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows</title><link>https://patchthecve.com/cve/CVE-2024-42577.html</link><guid>https://patchthecve.com/cve/CVE-2024-42577.html</guid><pubDate>Wed, 17 Jun 2026 07:49:41 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-42576: A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 all</title><link>https://patchthecve.com/cve/CVE-2024-42576.html</link><guid>https://patchthecve.com/cve/CVE-2024-42576.html</guid><pubDate>Wed, 17 Jun 2026 07:49:41 +0000</pubDate><description>HIGH 8.8: A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.</description></item><item><title>CVE-2024-7460: A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0</title><link>https://patchthecve.com/cve/CVE-2024-7460.html</link><guid>https://patchthecve.com/cve/CVE-2024-7460.html</guid><pubDate>Wed, 17 Jun 2026 08:20:15 +0000</pubDate><description>MEDIUM 4.3: A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change_password.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exp</description></item><item><title>CVE-2024-7459: A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0</title><link>https://patchthecve.com/cve/CVE-2024-7459.html</link><guid>https://patchthecve.com/cve/CVE-2024-7459.html</guid><pubDate>Wed, 17 Jun 2026 08:20:14 +0000</pubDate><description>MEDIUM 4.3: A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /edit_account.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been discl</description></item></channel></rss>