PT-2026-91853

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

CVE-2026-90696

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

CVE-2026-90695

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendorshandler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

CVE-2026-90694

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

CVE-2026-90697 SourceCodester Inventory Management System invoice.php authorization

A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be...

CVE-2026-90697

SourceCodester Inventory Management System 1.0 contains an authorization bypass in invoice.php. The root cause is the manipulation of the ID argument , allowing a remote, low-privilege attacker to access protected content with a low confidentiality impact (CVSS 3.1: 4.3 MEDIUM ). A proof-of-conce...

EUVD-2026-77329

A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be...

CVE-2026-90697 SourceCodester Inventory Management System invoice.php authorization

A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to authorization bypass. It is possible to initiate the attack remotely. The exploit is publicly available and might be...

CVE-2026-90696 SourceCodester Inventory Management System Product Management products_handler.php cross site scripting

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

CVE-2026-90696

SourceCodester Inventory Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Product Management Module , specifically in the file /api/products_handler.php . Manipulating the Product_Name argument allows a remote, low-privilege attacker to inject malicious scrip...

EUVD-2026-77327

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

CVE-2026-90696 SourceCodester Inventory Management System Product Management products_handler.php cross site scripting

A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/productshandler.php of the component Product Management Module. Executing a manipulation of the argument ProductName can lead to cross site...

CVE-2026-90695

SourceCodester Inventory Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Vendor Management component, specifically in the file /api/vendors_handler.php. The flaw is exploitable remotely with low complexity and low privileges, requiring user interaction. A pr...

EUVD-2026-77320

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendorshandler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

CVE-2026-90695 SourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scripting

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendorshandler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

CVE-2026-90695 SourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scripting

A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendorshandler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack is possible to be...

CVE-2026-90694

SourceCodester Inventory Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Customer Management Module , specifically in the file /api/customers_handler.php. Manipulation of the Customer_Name argument allows remote attackers to inject malicious scripts, resulti...

EUVD-2026-77319

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

CVE-2026-90694 SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...

CVE-2026-90694 SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting

A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customershandler.php of the component Customer Management Module. Such manipulation of the argument CustomerName leads to cross site scripting. The attack can be...