Codeastro Simple Inventory System vulnerabilities

3 CVEs affecting Codeastro Simple Inventory System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13280, published 2025-11-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-13280, published 2025-11-17. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the…
CVE-2025-11611, published 2025-10-11. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The…
CVE-2025-11610, published 2025-10-11. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName…