CVE-2023-46582

published 2023-11-14

CVE-2023-46582: SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
code-projects	inventory_management	—	—

CWE-89