EUVD-2026-77329

A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be...

CVE-2026-90697 SourceCodester Inventory Management System invoice.php authorization

A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be...

CVE-2026-90696 SourceCodester Inventory Management System Product Management products_handler.php cross site scripting

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

CVE-2026-90696

SourceCodester Inventory Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Product Management Module , specifically in the file /api/products_handler.php . Manipulating the Product_Name argument allows a remote, low-privilege attacker to inject malicious scrip...

EUVD-2026-77327

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

CVE-2026-90696 SourceCodester Inventory Management System Product Management products_handler.php cross site scripting

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

CVE-2026-90695 SourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scripting

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendorshandler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

CVE-2026-90695 SourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scripting

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendorshandler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

CVE-2026-90695

SourceCodester Inventory Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Vendor Management component, specifically in the file /api/vendors_handler.php. The flaw is exploitable remotely with low complexity and low privileges, requiring user interaction. A pr...

EUVD-2026-77320

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendorshandler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

CVE-2026-90694 SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

CVE-2026-90694

SourceCodester Inventory Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Customer Management Module , specifically in the file /api/customers_handler.php. Manipulation of the Customer_Name argument allows remote attackers to inject malicious scripts, resulti...

EUVD-2026-77319

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

CVE-2026-90694 SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

EUVD-2026-77129

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...

EUVD-2026-77135

A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. This affects an unknown function of the file includes/process.php. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. The explo...

PT-2026-91112

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customers handler.php of the component Customer Management Module. Such manipulation of the argument Customer Name leads to cross site scripting. The attack can be...

PT-2026-91113

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendors handler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

PT-2026-91117

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products handler.php of the component Product Management Module. Executing a manipulation of the argument Product Name can lead to cross site...

PT-2026-91123

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro edit1.php. Such manipulation of the argument prodcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...