CVE-2022-31340

CriticalCVSS 9.8

Published: 02/06/2022(UTC)Updated: 29/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.11%

62th percentile - higher than 62% of all known CVEs

Summary

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php. Unsanitized input allows injection of malicious SQL code.

Risk Assessment

An attacker can read, modify, or delete database data, compromising the confidentiality and integrity of the application data.

Recommendation

Update Simple Inventory System to the latest version or apply a security patch to prevent SQL injection.

Original NVD description (English source)

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.