CVE-2025-11610

CVE-2025-11610 affects SourceCodester Simple Inventory System 1.0. The vulnerability is a SQL injection in the /brand.php handling of the editBrandName parameter, reported to be exploitable remotely and with a public exploit. Multiple connected sources confirm the same flaw and classify the risk ...

CVE-2025-11611

CVE-2025-11611 affects SourceCodester Simple Inventory System 1.0, with the vulnerability located in an unknown function of /user.php where manipulation of the uemail parameter yields SQL injection. The flaw is exploitable remotely and exploits have been publicly released. Multiple sources (NVD, ...

CVE-2025-13280

CVE-2025-13280 affects CodeAstro Simple Inventory System 1.0, specifically the Login component’s /index.php where manipulating the Username parameter enables SQL injection. Multiple connected sources confirm the flaw is exploitable remotely and that exploits have been publicly disclosed. The vuln...