Skip to content
OpenAdvisories

Vendor

Harsh21Patel

1 known vulnerabilities.

Products

Inventory-Management-System-PHP 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-71248

    Inventory-Management-System-PHP - Unauthenticated SQL Injection in Login and Product Deletion

    Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: = "select * from user where email = '' and password = ''", with no escaping or parameterization, allowing authentication by…

    Harsh21Patel Inventory-Management-System-PHP