Web-Based Inventory and POS System vulnerabilities

2 known vulnerabilities in Web-Based Inventory and POS System from code-projects. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Web-Based Inventory and POS System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-11431Oct 8, 2025code-projects

  A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carrie

• 9.8 Critical severity

  Web-Based Inventory and POS System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2025-11424Oct 8, 2025code-projects

  A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote.