Vulnerabilities > Code Projects > Inventory Management > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-09-09 CVE-2024-8605 Cross-site Scripting vulnerability in Code-Projects Inventory Management 1.0
A vulnerability classified as problematic was found in code-projects Inventory Management 1.0.
network
low complexity
code-projects CWE-79
5.4
2023-11-14 CVE-2023-46580 Cross-site Scripting vulnerability in Code-Projects Inventory Management 1.0
Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component.
network
low complexity
code-projects CWE-79
5.4
2023-11-14 CVE-2023-46581 SQL Injection vulnerability in Code-Projects Inventory Management 1.0
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component.
local
low complexity
code-projects CWE-89
5.5