Product Inventory System
Monthly
Authenticated SQL injection in Product Inventory System 1.0 via the ID parameter in /admin/edit_user.php allows high-privilege attackers to execute arbitrary SQL commands. A public proof-of-concept is available, but the very low EPSS score (0.06%) and absence of KEV listing indicate negligible real-world exploitation risk.
SQL injection in Product Inventory System 1.0 allows remote authenticated attackers with administrative privileges to modify database records via the ID parameter in /admin/edit_product.php. Exploit code is publicly available, but no evidence of active exploitation; the EPSS score is very low (0.06%), suggesting limited real-world risk at this time.
SQL injection in the login endpoint of code-projects Product Inventory System 1.0 allows remote attackers to manipulate the Username parameter. This can lead to authentication bypass, data leakage, or database tampering. Exploit code is publicly available, but no active exploitation campaign has been confirmed.
Authenticated SQL injection in Product Inventory System 1.0 via the ID parameter in /admin/edit_user.php allows high-privilege attackers to execute arbitrary SQL commands. A public proof-of-concept is available, but the very low EPSS score (0.06%) and absence of KEV listing indicate negligible real-world exploitation risk.
SQL injection in Product Inventory System 1.0 allows remote authenticated attackers with administrative privileges to modify database records via the ID parameter in /admin/edit_product.php. Exploit code is publicly available, but no evidence of active exploitation; the EPSS score is very low (0.06%), suggesting limited real-world risk at this time.
SQL injection in the login endpoint of code-projects Product Inventory System 1.0 allows remote attackers to manipulate the Username parameter. This can lead to authentication bypass, data leakage, or database tampering. Exploit code is publicly available, but no active exploitation campaign has been confirmed.