Lucene search
+L

2 matches found

CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•22 views

Simple Inventory System SQL Injection Vulnerability

Simple Inventory System is an inventory system. version 1.0 of Simple Inventory System is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks via /inventory/tableeditajax.php...

9.8CVSS5.8AI score0.01165EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/01 12:00 a.m.•9 views

PT-2022-20697

Name of the Vulnerable Software and Affected Versions Simple Inventory System version 1.0 Description The issue allows for SQL Injection via the "/inventory/table edit ajax.php" API endpoint. Recommendations For Simple Inventory System version 1.0, consider disabling access to the "/inventory/tab...

9.8CVSS0.01165EPSS
SaveExploits1References3
Rows per page
Query Builder