{"schema_version":1,"title":"SourceCodester Inventory Management System vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in SourceCodester Inventory Management System: 0 in the last 7 days and 16 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-90697, was published on 14 September 2026.","url":"https://junglewise.ai/threats/technologies/inventory-management-system","json_url":"https://junglewise.ai/threats/technologies/inventory-management-system.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/inventory-management-system","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":6,"all_time":16,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":14,"last_90_days":16,"last_365_days":16},"latest":[{"cve":"CVE-2026-90697","cvss":4.3,"epss":0.0041,"slug":"cve-2026-90697-sourcecodester-inventory-management-system-idor-in-invoice-php","title":"SourceCodester Inventory Management System IDOR in invoice.php","severity":"medium","exploited":false,"published_at":"2026-09-14T09:17:02.127+00:00","url":"https://junglewise.ai/threats/cve-2026-90697-sourcecodester-inventory-management-system-idor-in-invoice-php"},{"cve":"CVE-2026-90696","cvss":3.5,"epss":0.0035,"slug":"cve-2026-90696-sourcecodester-inventory-management-system-stored-xss-in-product","title":"SourceCodester Inventory Management System stored XSS in product name","severity":"low","exploited":false,"published_at":"2026-09-14T09:17:01.95+00:00","url":"https://junglewise.ai/threats/cve-2026-90696-sourcecodester-inventory-management-system-stored-xss-in-product"},{"cve":"CVE-2026-90695","cvss":3.5,"epss":0.0035,"slug":"cve-2026-90695-sourcecodester-inventory-management-system-stored-xss-in-vendor","title":"SourceCodester Inventory Management System stored XSS in Vendor Management","severity":"low","exploited":false,"published_at":"2026-09-14T08:16:36.017+00:00","url":"https://junglewise.ai/threats/cve-2026-90695-sourcecodester-inventory-management-system-stored-xss-in-vendor"},{"cve":"CVE-2026-90694","cvss":3.5,"epss":0.0035,"slug":"cve-2026-90694-sourcecodester-inventory-management-system-stored-xss-in-customer","title":"SourceCodester Inventory Management System stored XSS in customer name","severity":"low","exploited":false,"published_at":"2026-09-14T08:16:35.85+00:00","url":"https://junglewise.ai/threats/cve-2026-90694-sourcecodester-inventory-management-system-stored-xss-in-customer"},{"cve":"CVE-2026-90599","cvss":4.3,"epss":0.0024,"slug":"cve-2026-90599-rizwan17-inventory-management-system-csrf-in-process-php","title":"Rizwan17 inventory-management-system CSRF in process.php","severity":"medium","exploited":false,"published_at":"2026-09-13T22:17:01.053+00:00","url":"https://junglewise.ai/threats/cve-2026-90599-rizwan17-inventory-management-system-csrf-in-process-php"},{"cve":"CVE-2026-90566","cvss":7.3,"epss":0.0047,"slug":"cve-2026-90566-rizwan17-inventory-management-system-privilege-escalation-in","title":"Rizwan17 inventory-management-system privilege escalation in registration","severity":"high","exploited":false,"published_at":"2026-09-13T16:16:52.67+00:00","url":"https://junglewise.ai/threats/cve-2026-90566-rizwan17-inventory-management-system-privilege-escalation-in"},{"cve":"CVE-2026-90565","cvss":5.3,"epss":0.0053,"slug":"cve-2026-90565-rizwan17-inventory-management-system-auth-bypass-in-dashboard-php","title":"Rizwan17 inventory-management-system auth bypass in dashboard.php","severity":"medium","exploited":false,"published_at":"2026-09-13T16:16:52.507+00:00","url":"https://junglewise.ai/threats/cve-2026-90565-rizwan17-inventory-management-system-auth-bypass-in-dashboard-php"},{"cve":"CVE-2026-87926","cvss":4.3,"epss":0.0047,"slug":"cve-2026-87926-rizwan17-inventory-management-system-reflected-xss-in-login-page","title":"Rizwan17 inventory-management-system reflected XSS in login page","severity":"medium","exploited":false,"published_at":"2026-09-10T00:17:24.567+00:00","url":"https://junglewise.ai/threats/cve-2026-87926-rizwan17-inventory-management-system-reflected-xss-in-login-page"},{"cve":"CVE-2026-87925","cvss":7.3,"epss":0.0043,"slug":"cve-2026-87925-rizwan17-inventory-management-system-sql-injection-in-order","title":"Rizwan17 inventory-management-system SQL injection in order processing","severity":"high","exploited":false,"published_at":"2026-09-10T00:17:24.387+00:00","url":"https://junglewise.ai/threats/cve-2026-87925-rizwan17-inventory-management-system-sql-injection-in-order"},{"cve":"CVE-2026-87924","cvss":6.5,"epss":0.0076,"slug":"cve-2026-87924-rizwan17-inventory-management-system-authentication-bypass-in","title":"Rizwan17 inventory-management-system authentication bypass in invoice generation","severity":"medium","exploited":false,"published_at":"2026-09-09T23:16:56.43+00:00","url":"https://junglewise.ai/threats/cve-2026-87924-rizwan17-inventory-management-system-authentication-bypass-in"},{"cve":"CVE-2026-87923","cvss":4.3,"epss":0.0047,"slug":"cve-2026-87923-rizwan17-inventory-management-system-stored-cross-site-scripting","title":"Rizwan17 inventory-management-system stored cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-09-09T23:16:56.253+00:00","url":"https://junglewise.ai/threats/cve-2026-87923-rizwan17-inventory-management-system-stored-cross-site-scripting"},{"cve":"CVE-2026-87922","cvss":7.3,"epss":0.0069,"slug":"cve-2026-87922-rizwan17-inventory-management-system-missing-authentication-in","title":"Rizwan17 inventory-management-system missing authentication in AJAX backend","severity":"high","exploited":false,"published_at":"2026-09-09T22:18:47.39+00:00","url":"https://junglewise.ai/threats/cve-2026-87922-rizwan17-inventory-management-system-missing-authentication-in"},{"cve":"CVE-2026-87921","cvss":7.3,"epss":0.0043,"slug":"cve-2026-87921-rizwan17-inventory-management-system-sql-injection-in-manage","title":"Rizwan17 inventory-management-system SQL injection in manage_record","severity":"high","exploited":false,"published_at":"2026-09-09T22:18:47.193+00:00","url":"https://junglewise.ai/threats/cve-2026-87921-rizwan17-inventory-management-system-sql-injection-in-manage"},{"cve":"CVE-2026-86211","cvss":7.3,"epss":0.0041,"slug":"cve-2026-86211-rabindralamsal-inventory-management-system-sql-injection-in-login","title":"rabindralamsal inventory-management-system SQL injection in login","severity":"high","exploited":false,"published_at":"2026-09-06T11:18:06.427+00:00","url":"https://junglewise.ai/threats/cve-2026-86211-rabindralamsal-inventory-management-system-sql-injection-in-login"},{"cve":"CVE-2026-13570","cvss":3.5,"slug":"cve-2026-13570-sourcecodester-inventory-management-system-xss-in-user","title":"SourceCodester Inventory Management System XSS in User Registration Endpoint","severity":"low","exploited":false,"published_at":"2026-06-29T14:16:47.657+00:00","url":"https://junglewise.ai/threats/cve-2026-13570-sourcecodester-inventory-management-system-xss-in-user"},{"cve":"CVE-2026-13568","cvss":7.3,"slug":"cve-2026-13568-sourcecodester-inventory-management-system-improper-access","title":"SourceCodester Inventory Management System improper access control in users_handler.php","severity":"high","exploited":false,"published_at":"2026-06-29T14:16:47.313+00:00","url":"https://junglewise.ai/threats/cve-2026-13568-sourcecodester-inventory-management-system-improper-access"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":9},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"SourceCodester Class and Exam Timetabling System","slug":"class-and-exam-timetabling-system","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/class-and-exam-timetabling-system"},{"name":"SourceCodester Simple Online Food Ordering System","slug":"simple-online-food-ordering-system","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/simple-online-food-ordering-system"},{"name":"SourceCodester Pharmacy Sales and Inventory System","slug":"pharmacy-sales-and-inventory-system","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/pharmacy-sales-and-inventory-system"},{"name":"SourceCodester CET Automated Grading System with AI Predictive Analytics","slug":"cet-automated-grading-system-with-ai-predictive-analytics","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/cet-automated-grading-system-with-ai-predictive-analytics"},{"name":"SourceCodester Syllabus-Aligned Learning Management & Examination System","slug":"syllabus-aligned-learning-management-examination-system","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/syllabus-aligned-learning-management-examination-system"},{"name":"SourceCodester Multi-Vendor Online Grocery Management System","slug":"multi-vendor-online-grocery-management-system","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/multi-vendor-online-grocery-management-system"},{"name":"SourceCodester Online-Examination-And-Learning-Management-System","slug":"online-examination-learning-management-system","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/online-examination-learning-management-system"},{"name":"SourceCodester Pizzafy Ecommerce System","slug":"pizzafy-ecommerce-system","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/pizzafy-ecommerce-system"},{"name":"SourceCodester CASAP Automated Enrollment System","slug":"casap-automated-enrollment-system","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/casap-automated-enrollment-system"},{"name":"SourceCodester Hospitals Patient Records Management System","slug":"hospitals-patient-records-management-system","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/hospitals-patient-records-management-system"},{"name":"SourceCodester Simple and Nice Shopping Cart Script","slug":"simple-and-nice-shopping-cart-script","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/simple-and-nice-shopping-cart-script"},{"name":"SourceCodester Student Grades Management System","slug":"student-grades-management-system","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/student-grades-management-system"}],"technology":{"hub":true,"name":"SourceCodester Inventory Management System","slug":"inventory-management-system","vendor":{"name":"SourceCodester","slug":"sourcecodester","url":"https://junglewise.ai/threats/vendors/sourcecodester"},"aliases":[],"category":"web-application","homepage":"https://www.sourcecodester.com/php/14366/inventory-management-system-using-phpmysqli-source-code.html","repo_url":"https://github.com/oreoluwa-ot/Inventory-Management-System-PHP","description":"A PHP-based web application for managing product stock, sales, and inventory.","url":"https://junglewise.ai/threats/technologies/inventory-management-system"},"most_severe":[{"cve":"CVE-2026-87922","cvss":7.3,"epss":0.0069,"slug":"cve-2026-87922-rizwan17-inventory-management-system-missing-authentication-in","title":"Rizwan17 inventory-management-system missing authentication in AJAX backend","severity":"high","exploited":false,"published_at":"2026-09-09T22:18:47.39+00:00","url":"https://junglewise.ai/threats/cve-2026-87922-rizwan17-inventory-management-system-missing-authentication-in"},{"cve":"CVE-2026-90566","cvss":7.3,"epss":0.0047,"slug":"cve-2026-90566-rizwan17-inventory-management-system-privilege-escalation-in","title":"Rizwan17 inventory-management-system privilege escalation in registration","severity":"high","exploited":false,"published_at":"2026-09-13T16:16:52.67+00:00","url":"https://junglewise.ai/threats/cve-2026-90566-rizwan17-inventory-management-system-privilege-escalation-in"},{"cve":"CVE-2026-87925","cvss":7.3,"epss":0.0043,"slug":"cve-2026-87925-rizwan17-inventory-management-system-sql-injection-in-order","title":"Rizwan17 inventory-management-system SQL injection in order processing","severity":"high","exploited":false,"published_at":"2026-09-10T00:17:24.387+00:00","url":"https://junglewise.ai/threats/cve-2026-87925-rizwan17-inventory-management-system-sql-injection-in-order"},{"cve":"CVE-2026-87921","cvss":7.3,"epss":0.0043,"slug":"cve-2026-87921-rizwan17-inventory-management-system-sql-injection-in-manage","title":"Rizwan17 inventory-management-system SQL injection in manage_record","severity":"high","exploited":false,"published_at":"2026-09-09T22:18:47.193+00:00","url":"https://junglewise.ai/threats/cve-2026-87921-rizwan17-inventory-management-system-sql-injection-in-manage"},{"cve":"CVE-2026-86211","cvss":7.3,"epss":0.0041,"slug":"cve-2026-86211-rabindralamsal-inventory-management-system-sql-injection-in-login","title":"rabindralamsal inventory-management-system SQL injection in login","severity":"high","exploited":false,"published_at":"2026-09-06T11:18:06.427+00:00","url":"https://junglewise.ai/threats/cve-2026-86211-rabindralamsal-inventory-management-system-sql-injection-in-login"},{"cve":"CVE-2026-13568","cvss":7.3,"slug":"cve-2026-13568-sourcecodester-inventory-management-system-improper-access","title":"SourceCodester Inventory Management System improper access control in users_handler.php","severity":"high","exploited":false,"published_at":"2026-06-29T14:16:47.313+00:00","url":"https://junglewise.ai/threats/cve-2026-13568-sourcecodester-inventory-management-system-improper-access"},{"cve":"CVE-2026-87924","cvss":6.5,"epss":0.0076,"slug":"cve-2026-87924-rizwan17-inventory-management-system-authentication-bypass-in","title":"Rizwan17 inventory-management-system authentication bypass in invoice generation","severity":"medium","exploited":false,"published_at":"2026-09-09T23:16:56.43+00:00","url":"https://junglewise.ai/threats/cve-2026-87924-rizwan17-inventory-management-system-authentication-bypass-in"},{"cve":"CVE-2026-90565","cvss":5.3,"epss":0.0053,"slug":"cve-2026-90565-rizwan17-inventory-management-system-auth-bypass-in-dashboard-php","title":"Rizwan17 inventory-management-system auth bypass in dashboard.php","severity":"medium","exploited":false,"published_at":"2026-09-13T16:16:52.507+00:00","url":"https://junglewise.ai/threats/cve-2026-90565-rizwan17-inventory-management-system-auth-bypass-in-dashboard-php"},{"cve":"CVE-2026-87926","cvss":4.3,"epss":0.0047,"slug":"cve-2026-87926-rizwan17-inventory-management-system-reflected-xss-in-login-page","title":"Rizwan17 inventory-management-system reflected XSS in login page","severity":"medium","exploited":false,"published_at":"2026-09-10T00:17:24.567+00:00","url":"https://junglewise.ai/threats/cve-2026-87926-rizwan17-inventory-management-system-reflected-xss-in-login-page"},{"cve":"CVE-2026-87923","cvss":4.3,"epss":0.0047,"slug":"cve-2026-87923-rizwan17-inventory-management-system-stored-cross-site-scripting","title":"Rizwan17 inventory-management-system stored cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-09-09T23:16:56.253+00:00","url":"https://junglewise.ai/threats/cve-2026-87923-rizwan17-inventory-management-system-stored-cross-site-scripting"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}