CVE-2023-46449

CVE-2023-46449 Incorrect Access Control VIDEO POC LINK https://www.youtube.com/watch?v=H5QnsOKjs3s Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via...

-CVE-2023-46450

-CVE-2023-46450 Description Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function. Additional Information A video POC stored XSS vulnerability exists in the add supplier functionality in free and open source...

CVE-2026-112095

A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/productshandler.php?action=save of the component Product Management. Executing a manipulation of the argument ProductId/ProductName can lead to cross site scripting. The attack may be...

CVE-2026-112097

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactionshandler.php?action=savesale of the component Sales Management Handler. The manipulation of the argument HsnCode results in cross site scripting. It is possible...

CVE-2026-112096

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactionshandler.php?action=savepurchase of the component Purchase Records Handler. The manipulation of the argument ProductName/ProductCode/VendorName leads to cross...

CVE-2026-112097

The SourceCodester Inventory System 1.0 contains a cross-site scripting (XSS) vulnerability within the Sales Management Handler component. The flaw exists in the processing of the file /api/transactions_handler.php?action=save_sale, where manipulating the Hsn_Code argument allows for the executio...

CVE-2026-112097 SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactionshandler.php?action=savesale of the component Sales Management Handler. The manipulation of the argument HsnCode results in cross site scripting. It is possible...

EUVD-2026-104126

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactionshandler.php?action=savesale of the component Sales Management Handler. The manipulation of the argument HsnCode results in cross site scripting. It is possible...

CVE-2026-112096 SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactionshandler.php?action=savepurchase of the component Purchase Records Handler. The manipulation of the argument ProductName/ProductCode/VendorName leads to cross...

CVE-2026-112096

The SourceCodester Inventory System 1.0 contains a Cross-Site Scripting (XSS) vulnerability within the Purchase Records Handler component. Specifically, the file /api/transactions_handler.php?action=save_purchase fails to properly neutralize input in the Product_Name , Product_Code , and Vendor_N...

EUVD-2026-104123

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactionshandler.php?action=savepurchase of the component Purchase Records Handler. The manipulation of the argument ProductName/ProductCode/VendorName leads to cross...

CVE-2026-112095

The SourceCodester Inventory System 1.0 is vulnerable to Cross-Site Scripting (XSS) within the Product Management component. The flaw resides in the /api/products_handler.php?action=save file, where a manipulation of the Product_Id or Product_Name arguments can lead to script execution. This vuln...

CVE-2026-112095 SourceCodester Inventory System Product Management products_handler.php save cross site scripting

A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/productshandler.php?action=save of the component Product Management. Executing a manipulation of the argument ProductId/ProductName can lead to cross site scripting. The attack may be...

EUVD-2026-104121

A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/productshandler.php?action=save of the component Product Management. Executing a manipulation of the argument ProductId/ProductName can lead to cross site scripting. The attack may be...

CVE-2026-112095: Improper Neutralization of Input During Web Page Generation

A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/productshandler.php?action=save of the component Product Management. Executing a manipulation of the argument ProductId/ProductName can lead to cross site scripting. The attack may be...

CVE-2026-112096: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactionshandler.php?action=savepurchase of the component Purchase Records Handler. The manipulation of the argument ProductName/ProductCode/VendorName leads to cross...

CVE-2026-112097: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactionshandler.php?action=savesale of the component Sales Management Handler. The manipulation of the argument HsnCode results in cross site scripting. It is possible...

CVE-2026-92406

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92405

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2026-92406 SourceCodester Inventory and Monitoring System btn_functions.php add sql injection

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...