Skip to main content

Simple Inventory System EUVDEUVD-2026-68369

| CVE-2026-82624 MEDIUM
Information Exposure (CWE-200)
2026-08-31 VulDB GHSA-x5mg-534m-v2p5
Information Disclosure Simple Inventory System Code Projects
5.5
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
5.5 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.3 MEDIUM

Network-accessible file with no authentication or interaction required; only partial confidentiality impact, no integrity or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

3
CVE Published
Aug 31, 2026 - 10:50 cve.org
MEDIUM 5.5
CVSS changed
Aug 31, 2026 - 07:22 NVD
6.9 (MEDIUM) 5.5 (MEDIUM)
Analysis Generated
Aug 31, 2026 - 07:02 vuln.today

DescriptionCVE.org

A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Database Backup File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been published and may be used.

AnalysisAI

Direct remote access to an unprotected SQL database backup file in code-projects Simple Inventory System 1.0 allows unauthenticated attackers to retrieve the full contents of the inventory database without any credentials or user interaction. The file inventorymanagement.sql is stored within the web-accessible directory and is directly downloadable via HTTP. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No special conditions are required beyond network access to the web server hosting the application. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.9 reflects the zero-authentication, network-accessible nature of this disclosure, with exploit maturity flag E:P confirming a publicly available proof-of-concept. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Simple Inventory System

View all
CVE-2022-31340 CRITICAL POC
9.8 Jun 02

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php. Rated critical severity

CVE-2022-31339 HIGH POC
7.2 Jun 02

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php. Rated high severity (CVSS 7.2), th
CVE-2024-5097 MEDIUM POC
6.9 May 19

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Inventory System 1.0. Rated med
CVE-2026-76990 MEDIUM POC
5.5 Aug 20

SQL injection in code-projects Simple Inventory System 1.0 allows remote unauthenticated attackers to manipulate backend
CVE-2025-13280 MEDIUM POC
5.5 Nov 17

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerab
CVE-2024-5101 MEDIUM POC
5.3 May 19

A vulnerability was found in SourceCodester Simple Inventory System 1.0. Rated medium severity (CVSS 5.3), this vulnerab
CVE-2024-5100 MEDIUM POC
5.3 May 19

A vulnerability was found in SourceCodester Simple Inventory System 1.0. Rated medium severity (CVSS 5.3), this vulnerab
CVE-2024-5099 MEDIUM POC
5.3 May 19

A vulnerability was found in SourceCodester Simple Inventory System 1.0 and classified as critical. Rated medium severit
CVE-2024-5098 MEDIUM POC
5.1 May 19

A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Rated medium se
CVE-2026-82625 LOW POC
2.1 Aug 31

Stored cross-site scripting in code-projects Simple Inventory System 1.0 allows remote unauthenticated attackers to inje
CVE-2025-11611 LOW POC
2.1 Oct 11

SQL injection in SourceCodester Simple Inventory System 1.0 via the uemail parameter in /user.php allows authenticated r
CVE-2025-11610 LOW POC
2.1 Oct 11

SQL injection in SourceCodester Simple Inventory System 1.0 via the editBrandName parameter in /brand.php allows authent

Same weakness CWE-200 – Information Exposure

View all
CVE-2024-24919 HIGH POC
8.6
CVE-2016-6415 HIGH POC
7.5
CVE-2013-7331 MEDIUM POC
6.5
CVE-2025-31125 MEDIUM POC
5.3
CVE-2025-11749 CRITICAL POC
9.8
CVE-2017-16894 HIGH POC
7.5
CVE-2017-11165 CRITICAL POC
9.8
CVE-2020-3259 HIGH
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-68369 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy