High severity7.8NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2023-46582

Description

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Code Projects/Inventory Management2 versions
cpe:2.3:a:code-projects:inventory_management:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:code-projects:inventory_management:1.0:*:*:*:*:*:*:*
- (no CPE)range: = 1.0
Inventory Management/Inventory Managementdescription

Patches

Vulnerability mechanics

References

github.com/ersinerenler/Code-Projects-Inventory-Management-1.0/blob/main/CVE-2023-46582-Code-Projects-Inventory-Management-1.0-SQL-Injection-Vulnerability.mdnvdExploitProductThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000