VYPR

Simple Inventory System

by Codeastro

CVEs (3)

  • CVE-2025-13280HigNov 17, 2025
    risk 0.47cvss 7.3epss 0.00

    A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely.…

  • CVE-2025-11611MedOct 11, 2025
    risk 0.41cvss 6.3epss 0.00

    A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made…

  • CVE-2025-11610MedOct 11, 2025
    risk 0.41cvss 6.3epss 0.00

    A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has…