Cpe:2.3:a:rizwan17:inventory_management_system:*:*:*:*:*:*:*:*

An authentication bypass vulnerability in the AJAX backend of Rizwan17 inventory-management-system allows remote attackers to execute unauthorized category additions via the userid parameter.