CVE-2022-1177

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...

CVE-2022-1177 Accounting User Can Download Patient Reports in openemr in openemr/openemr

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...

CVE-2022-1177 Accounting User Can Download Patient Reports in openemr in openemr/openemr

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800, related to the use of rigidly encrypted accounting data, allows a perpetrator to increase their privileges.

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800 is related to the use of rigidly encrypted accounting data. Exploiting this vulnerability can allow attackers to enhance their privileges...

WordPress Finpose – Accounting for WooCommerce plugin <= 4.4.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Finpose – Accounting for WooCommerce plugin versions = 4.4.2. Solution Update the WordPress Finpose – Accounting for WooCommerce plugin to the latest available version at least 4.4.3...

WordPress Finpose – Accounting and Financial Tracking plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Finpose – Accounting and Financial Tracking plugin versions = 1.0.0. Solution No patched version available...

WordPress Finpose – Accounting and Financial Tracking plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Finpose – Accounting and Financial Tracking plugin versions = 1.0.0. Solution No patched version available...

Accounting Journal Management Cross-Site Scripting Vulnerability

Accounting Journal Management is a simple PHP-based accounting journal management system with a trial balance. accounting Journal Management version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of filtering of user-supplied data and The vulnerability is caused ...

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the software package for accounting or resource planning in Microsoft Dynamics GP relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP involves incorrect code generation. Exploiting this vulnerability allows an attacker who operates remotely to generate arbitrary code...

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the software package for accounting or resource planning in Microsoft Dynamics GP relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2022-24582

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manageuser from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network...

CVE-2022-24582

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manageuser from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network...

CVE-2022-24582

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manageuser from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network...

Improper Authorization in dolibarr/dolibarr

Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more...

GHSA-4XC7-X2JR-CR74 Improper Authorization in dolibarr/dolibarr

Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more...

Interest surplus is accumulated on Master accounting update in TurboSafe.less

Lines of code Vulnerability details Impact There will be an interest surplus accumulating in all the master accounting variables totalBoosted, getTotalBoostedForVault and getTotalBoostedAgainstCollateral. As getTotalBoostedForVault and getTotalBoostedAgainstCollateral are used in the checks again...

CVE-2022-24582

CVE-2022-24582 affects Accounting Journal Management 1.0 (PHP-based). The issue is a cross-site scripting vulnerability in the user list parameter manage_user , enabling both stored XSS and PHPSESSID hijacking. An attacker could exploit an existing session to perform actions inside or outside the...

CVE-2022-24582

Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manageuser from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network...

Accounting Journal Management System 1.0 - 'id' SQLi (Authenticated)

Exploit Title: Accounting Journal Management System 1.0 - 'id' SQLi Authenticated Exploit Author: Alperen Ergel Contact: @alpernae IG/TW Software Homepage: https://www.sourcecodester.com/php/15155/accounting-journal-management-system-trial-balance-php-free-source-code.html Version : 1.0 Tested on...