Lucene search
K

69 matches found

RedhatCVE
RedhatCVE
added 2026/03/31 4:59 a.m.0 views

CVE-2026-30558

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

5.4CVSS6AI score0.00018EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/30 6:31 p.m.2 views

EUVD-2026-17097

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00018EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.3 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter msg i...

6.1CVSS5.6AI score0.00018EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/30 12:0 a.m.0 views

CVE-2026-30558

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00018EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/30 12:0 a.m.3 views

PT-2026-29040

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add customer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6AI score0.00018EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.0 views

CVE-2026-2850

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint...

6.5CVSS5.1AI score0.00064EPSS
Exploits1References1
NVD
NVD
added 2026/02/20 6:25 p.m.3 views

CVE-2026-2850

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint...

6.5CVSS0.00064EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/02/20 5:2 p.m.3 views

CVE-2026-2850

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function addCustomer/updateCustomer/deleteCustomer of the file dataset\repos\warehouse\src\main\java\com\yeqifu\bus\controller\CustomerController.java of the component Customer Endpoint...

6.5CVSS5.9AI score0.00064EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.5 views

warehouse 访问控制错误漏洞

Warehouse is a small-scale warehouse logistics management system developed by Yeqifu’s individual developer, based on Spring Boot. There is an access control vulnerability in Warehouse. This vulnerability stems from improper access control issues in the functions addCustomer, updateCustomer, and...

6.5CVSS6.6AI score0.00064EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/11/04 12:53 a.m.3 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS6.2AI score0.00041EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/03 6:31 p.m.1 views

EUVD-2025-37496

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS5.7AI score0.00041EPSS
Exploits1References2
NVD
NVD
added 2025/11/03 4:15 p.m.1 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

6.1CVSS0.00041EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/11/03 12:0 a.m.5 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

0.00041EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/11/03 12:0 a.m.2 views

CVE-2025-63447

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...

5.8AI score0.00041EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.3 views

PT-2025-44774

Name of the Vulnerable Software and Affected Versions Water Management System version 1.0 Description Water Management System version 1.0 is susceptible to Cross Site Scripting XSS attacks. The issue is located in the /add customer.php endpoint. The vulnerability allows attackers to inject...

6.1CVSS6.1AI score0.00041EPSS
Exploits1References3
CVE
CVE
added 2025/11/03 12:0 a.m.5 views

CVE-2025-63447

Water Management System v1.0 is affected by a Cross Site Scripting (XSS) vulnerability in the /add_customer.php endpoint. The issue is documented across multiple sources (NVD, Red Hat, EUVD, CIRCL, CVE list, CNNVD) and is generally described as an XSS in that endpoint. The root cause is not expli...

6.1CVSS5.8AI score0.00041EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2025/11/03 12:0 a.m.2 views

Water-Management-System 安全漏洞

Water-Management-System is an inventory management system by the individual developer Dikshant Naik. A security vulnerability exists in Water-Management-System version 1.0, which originates from a cross-site scripting vulnerability in the file /addcustomer.php...

6.1CVSS6.1AI score0.00041EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/10/07 11:23 a.m.2 views

CVE-2025-11333

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS5.5AI score0.00027EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/06 11:2 a.m.7 views

CVE-2025-11333 langleyfcu Online Banking System Add Customer customer_add_action.php cross site scripting

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customeraddaction.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting...

4.8CVSS0.00027EPSS
Exploits0References4
CVE
CVE
added 2025/10/06 11:2 a.m.6 views

CVE-2025-11333

CVE-2025-11333 affects langleyfcu Online Banking System up to version 57437e6400ce0ae240e692c24e6346b8d0c17d7a, specifically the Add Customer Page file /customer_add_action.php. The vulnerability arises from manipulation of the First Name parameter, causing cross-site scripting. Remote exploitati...

4.8CVSS5.2AI score0.00027EPSS
Exploits0References4
Rows per page
Query Builder