Sybululu

**Name of the Vulnerable Software and Affected Versions** Rizwan17 inventory-management-system versions up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f **Description** An improper access control issue exists in the `dashboard.php` file. A remote attacker can exploit this by manipulating the `userid` argument, allowing unauthorized access to the system. **Recommendations** As a temporary workaround, restrict access to the `dashboard.php` file or avoid using the `userid` argument until a fix is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rizwan17 inventory-management-system versions up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f **Description** A weakness in the Registration Handler component allows remote attackers to achieve improper authorization. This occurs through the manipulation of the `usertype` argument within the `createUserAccount()` function located in the register.php file. **Recommendations** As a temporary workaround, restrict access to the `createUserAccount()` function in the register.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.