Skip to content
OpenAdvisories

Product · Harsh21Patel

Inventory-Management-System-PHP

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-71248

    Inventory-Management-System-PHP - Unauthenticated SQL Injection in Login and Product Deletion

    Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: = "select * from user where email = '' and password = ''", with no escaping or parameterization, allowing authentication by…

    Harsh21Patel Inventory-Management-System-PHP