SourceCodester Inventory Management System 1.0 vulnerabilities

A cross-site scripting vulnerability was found in SourceCodester Inventory Management System 1.0 in the file /api/users_handler.php. Manipulating the full_name argument in the user registration endpoint allows remote script execution. The exploit is publicly available.

A vulnerability has been found in SourceCodester Inventory Management System 1.0 in the file /api/users_handler.php of the User Registration Endpoint. Manipulation of the role argument leads to improper access controls, allowing remote exploitation.

A critical vulnerability was found in SourceCodester Inventory Management System version 1.0. Manipulation of the 'page' argument in the index.php file leads to file inclusion, allowing for remote attacks.

A critical vulnerability was found in SourceCodester Inventory Management System version 1.0. Manipulation of the argument columns[0][data] in the staff_data.php file leads to SQL injection, which can be executed remotely.

A critical vulnerability has been found in SourceCodester Inventory Management System version 1.0. Manipulation of the 'customer' argument in the file app/ajax/search_purchase_paymen_report.php leads to SQL injection.

A vulnerability has been identified in SourceCodester Inventory Management System version 1.0 that allows cross site scripting (XSS) attacks through manipulation of the name/company argument in the suppliar_data.php file. The attack can be launched remotely.

A critical vulnerability has been identified in SourceCodester Inventory Management System version 1.0. Manipulation of the 'customer' argument in the app/ajax/search_sales_report.php file leads to SQL injection, allowing for remote attacks.

A critical vulnerability was found in SourceCodester Inventory Management System version 1.0. Manipulation of the 'customer' argument in the file app/ajax/search_sell_paymen_report.php leads to SQL injection, allowing for remote attacks.

A critical vulnerability has been found in SourceCodester Inventory Management System 1.0, affecting some unknown processing of the file app/action/edit_update.php. Manipulation of the argument user_id leads to SQL injection.

A critical vulnerability was found in SourceCodester Inventory Management System version 1.0. The issue affects some unknown processing of the file ex_catagory_data.php, leading to SQL injection.

A critical vulnerability has been found in SourceCodester Inventory Management System version 1.0. Manipulation of the argument columns[1][data] leads to SQL injection, which can be exploited remotely.

A critical vulnerability was found in SourceCodester Inventory Management System 1.0, affecting an unknown part of the file catagory_data.php. Manipulation of the argument columns[1][data] leads to SQL injection.

A critical vulnerability was found in SourceCodester Inventory Management System version 1.0. The issue affects some unknown processing of the file sell_return.php, where manipulation of the argument pid leads to SQL injection.

A critical vulnerability was found in SourceCodester Inventory Management System version 1.0, affecting an unknown part of the file edit_sell.php. Manipulation of the argument up_pid leads to SQL injection.