Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-46582 | 1 Code-projects | 1 Inventory Management | 2023-11-20 | N/A | 7.8 HIGH |
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component. | |||||
CVE-2023-46580 | 1 Code-projects | 1 Inventory Management | 2023-11-17 | N/A | 5.4 MEDIUM |
Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component. | |||||
CVE-2023-46581 | 1 Code-projects | 1 Inventory Management | 2023-11-17 | N/A | 5.5 MEDIUM |
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component. |