Inventory Management System Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Inventory Management System Project products: 2 record(s), with severity, exploitation and fixes.

Inventory Management System 2

Exploited only (KEV) →

CVE-2023-36338 Medium · 5.3 CWE-89 Dec 15, 2025

SQL Injection in Inventory Management System Project Inventory Management System

Inventory Management System 1 was discovered to contain a SQL injection vulnerability.

CVE-2023-36337 Medium · 6.1 CWE-79 Dec 15, 2025

Cross-site Scripting (XSS) in Inventory Management System Project Inventory Management System

A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of PHP Inventory Management System 1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.