What’s Vulnerable › Products

SourceCodester Inventory Management System vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your SourceCodester Inventory Management System version is affected

Latest SourceCodester Inventory Management System vulnerabilities

• CVE-2026-90697 — SourceCodester Inventory Management System invoice.php authorization (CVSS 4.3)
• CVE-2026-90696 — SourceCodester Inventory Management System Product Management products_handler.php cross site scripting (CVSS 3.5)
• CVE-2026-90695 — SourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scripting (CVSS 3.5)
• CVE-2026-90694 — SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting (CVSS 3.5)
• CVE-2026-13570 — SourceCodester Inventory Management System User Registration Endpoint users_handler.php cross site scripting (CVSS 3.5)
• CVE-2026-13568 — SourceCodester Inventory Management System User Registration Endpoint users_handler.php access control (CVSS 7.3)
• CVE-2023-36338 — (CVSS 5.3)
• CVE-2023-36337 — (CVSS 6.1)
• CVE-2023-4558 — SourceCodester Inventory Management System staff_data.php sql injection (CVSS 9.8)
• CVE-2023-4557 — SourceCodester Inventory Management System search_purchase_paymen_report.php sql injection (CVSS 9.8)
• CVE-2023-4555 — SourceCodester Inventory Management System suppliar_data.php cross site scripting (CVSS 6.1)
• CVE-2023-4449 — SourceCodester Free and Open Source Inventory Management System sql injection (CVSS 8.8)
• CVE-2023-4438 — SourceCodester Inventory Management System search_sales_report.php sql injection (CVSS 9.8)
• CVE-2023-4437 — SourceCodester Inventory Management System search_sell_paymen_report.php sql injection (CVSS 9.8)
• CVE-2023-4436 — SourceCodester Inventory Management System edit_update.php sql injection (CVSS 9.8)
• CVE-2023-4184 — SourceCodester Inventory Management System sell_return.php sql injection (CVSS 9.8)
• CVE-2023-4183 — SourceCodester Inventory Management System Password edit_update.php access control (CVSS 9.8)
• CVE-2023-4182 — SourceCodester Inventory Management System edit_sell.php sql injection (CVSS 9.8)
• CVE-2023-24234 — (CVSS 4.8)
• CVE-2023-24233 — (CVSS 4.8)
• CVE-2023-24232 — (CVSS 4.8)
• CVE-2023-24231 — (CVSS 4.8)