CVE-2022-31339: Improper Neutralization of Special Elements used in an SQL Command

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php...

PT-2022-20696

Name of the Vulnerable Software and Affected Versions Simple Inventory System version 1.0 Description The issue allows for SQL Injection via the "/inventory/login.php" API endpoint. Recommendations For Simple Inventory System version 1.0, consider disabling the login functionality in...

PT-2020-16931

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Grocery Store Sales And Inventory System version 1.0 Description An issue was discovered in the web login functionality, allowing authentication bypass. This enables an attacker to gain client privileges via SQL injection...