CVE-2022-31340

CVE-2022-31340 affects Simple Inventory System v1.0 and is due to a SQL Injection vulnerability in /inventory/table_edit_ajax.php. The Red Hat, CNVD, CNNVD and other feeds corroborate a SQLi issue in this exact path/component. CVSS data indicate a high-severity impact (high confidentiality, integ...

CVE-2022-31339

CVE-2022-31339 affects the Simple Inventory System v1.0, with a vulnerability in the login.php path that enables SQL injection. Multiple connected records (NVD, Red Hat, CNVD, CNNVD, CVE lists) confirm the vulnerability vector is via /inventory/login.php, indicating the issue resides in the login...