Skip to content
OpenAdvisories

Vendor

Part-DB

13 known vulnerabilities.

Products

Part-DB-server 11 Part-DB 1 part-db/part-db 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-86055

    Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover

    Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to a user from the client-supplied HTTP Host header, with no trusted-host validation…

    Part-DB Part-DB-server
  • High 7.5
    CVE-2019-25432

    Part-DB 0.4 Authentication Bypass via login.php

    Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can submit a single quote followed by 'or' in the login form to bypass credential vali…

    Part-DB Part-DB