CVE-2024-5100

🗓️ 19 May 2024 11:31:03Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 60 Views🌐 WEB

Vulnerability in SourceCodester Simple Inventory System 1.0, classified as critical with remote SQL injection

Reporter	Title	Published	Views	Family All 9
circl	CVE-2024-5100	14 Feb 202509:46	–	circl
cnnvd	Simple Inventory System SQL注入漏洞	19 May 202400:00	–	cnnvd
cvelist	CVE-2024-5100 SourceCodester Simple Inventory System tableedit.php sql injection	19 May 202411:31	–	cvelist
euvd	EUVD-2024-46357	3 Oct 202520:07	–	euvd
nvd	CVE-2024-5100	19 May 202412:15	–	nvd
osv	CVE-2024-5100	19 May 202412:15	–	osv
ptsecurity	PT-2024-34490 · Sourcecodester · Sourcecodester Simple Inventory System	19 May 202400:00	–	ptsecurity
redhatcve	CVE-2024-5100	23 May 202508:52	–	redhatcve
vulnrichment	CVE-2024-5100 SourceCodester Simple Inventory System tableedit.php sql injection	19 May 202411:31	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

argie simple_inventory_systemMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "Simple Inventory System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/rockersiyuan/CVE/blob/main/SourceCodester%20Simple%20Inventory%20System%20Sql%20Inject-3.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
from	query param	tableedit.php	SQL injection due to unsafely handled from/to parameters in tableedit.php.	CWE-89
to	query param	tableedit.php	SQL injection due to unsafely handled from/to parameters in tableedit.php.	CWE-89

17 Jun 2026 08:15Current

7.3High risk

Vulners AI Score7.3

CVSS 3.16.3 - 6.5

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.0049

SSVC

CWE-89