CVE-2009-4597

no score yetEPSS 1.0%

phpwares php inventory: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the user_id parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the (2) user (username) and (3) pass (password) parameters. NOTE: some of these details are obtained from third party information.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-01-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

phpwares:php_inventory

References

http://packetstormsecurity.org/0912-exploits/phpinventory-sql.txt
http://secunia.com/advisories/37672
http://www.exploit-db.com/exploits/10370
https://exchange.xforce.ibmcloud.com/vulnerabilities/54666
http://packetstormsecurity.org/0912-exploits/phpinventory-sql.txt

Check your stack JSON