Lucene search
+L

1860 matches found

Cvelist
Cvelist
•added 2023/12/13 7:31 p.m.•50 views

CVE-2023-6773 CodeAstro POS and Inventory Management System User Creation register_account access control

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

4.3CVSS9AI score0.0074EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/13 12:00 a.m.•3 views

CVE-2023-6773: Improper Access Control

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

8.8CVSS5.6AI score0.0074EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/13 12:00 a.m.•5 views

CVE-2023-6775: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /item/itemcon. The manipulation of the argument itemname leads to cross site scripting. It is possible to initiate the attack remotely. T...

6.1CVSS3.8AI score0.00577EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/13 12:00 a.m.•3 views

CVE-2023-6774: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /accountscon/registeraccount. The manipulation of the argument Username with the input leads to cross site scripting. The...

5.4CVSS3.7AI score0.00679EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/13 12:00 a.m.•20 views

PT-2023-32774 · Unknown · Codeastro Pos/Inventory Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS and Inventory Management System version 1.0 Description: A vulnerability was found in the CodeAstro POS and Inventory Management System, which has been classified as problematic. This issue affects an unknown part of the file...

6.1CVSS4.3AI score0.00577EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/12/13 12:00 a.m.•15 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in CodeAstro POS and Inventory Management System version 1.0, which stems from the presence of an unknown function in /accountscon/registeraccount that lead...

5.4CVSS6.1AI score0.00679EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/12/13 12:00 a.m.•15 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in CodeAstro POS and Inventory Management System version 1.0, which stems from an unknown section in /item/itemcon, leading to cross-site scripting via the...

6.1CVSS6.2AI score0.00577EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/12/13 12:00 a.m.•23 views

PT-2023-32772 · Unknown · Codeastro Pos/Inventory Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS and Inventory Management System version 1.0 Description: A vulnerability has been found in the system, allowing for improper access controls. The issue is related to the manipulation of the account type argument with the input...

8.8CVSS4.8AI score0.0074EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/12/13 12:00 a.m.•16 views

PT-2023-32773 · Unknown · Codeastro Pos/Inventory Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS and Inventory Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown functionality of the file /accounts con/register account. The manipulation of th...

5.4CVSS4.7AI score0.00679EPSS
SaveExploits1References6
OSV
OSV
•added 2023/10/26 6:15 p.m.•15 views

CVE-2023-5796

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

8.8CVSS5.4AI score0.00714EPSS
SaveExploits1References3
OSV
OSV
•added 2023/10/26 6:15 p.m.•12 views

CVE-2023-5795

A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profil of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

8.8CVSS5.3AI score0.00763EPSS
SaveExploits1References3
NVD
NVD
•added 2023/10/26 6:15 p.m.•33 views

CVE-2023-5795

A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profil of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

8.8CVSS7.1AI score0.00763EPSS
SaveExploits1References3
Prion
Prion
•added 2023/10/26 6:15 p.m.•31 views

Out-of-bounds

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

6.5CVSS8.6AI score0.00714EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/10/26 6:15 p.m.•30 views

Out-of-bounds

A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profil of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

6.5CVSS8.7AI score0.00763EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/26 5:31 p.m.•17 views

CVE-2023-5796 CodeAstro POS System Logo setting unrestricted upload

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

6.5CVSS6.8AI score0.00714EPSS
SaveExploits1References3
CVE
CVE
•added 2023/10/26 5:31 p.m.•66 views

CVE-2023-5796

CVE-2023-5796 affects CodeAstro POS System 1.0, where an unknown functionality in the Logo Handler’s /setting file allows unrestricted upload. The issue can be triggered remotely and has been publicly disclosed. APT-PT security advisory notes this as a critical flaw in Logo Handler, enabling arbi...

8.8CVSS7AI score0.00714EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/26 5:31 p.m.•19 views

CVE-2023-5795 CodeAstro POS System Profile Picture profil unrestricted upload

A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profil of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

6.5CVSS6.9AI score0.00763EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/10/26 5:31 p.m.•54 views

CVE-2023-5795 CodeAstro POS System Profile Picture profil unrestricted upload

A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profil of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

6.5CVSS9AI score0.00763EPSS
SaveExploits1References3
CVE
CVE
•added 2023/10/26 5:31 p.m.•61 views

CVE-2023-5795

CVE-2023-5795 concerns CodeAstro POS System 1.0. The vulnerability affects an unknown function within the Profile Picture Handler component (file path: /profil), enabling an unrestricted upload. The issue is described as critical and can be triggered remotely; the exploit has been publicly disclo...

8.8CVSS7.1AI score0.00763EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/26 12:00 a.m.•3 views

CVE-2023-5796: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

8.8CVSS6.3AI score0.00714EPSS
SaveExploits1References3
Rows per page
Query Builder