Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2 days ago6 views

CVE-2026-6651

A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability affects unknown code of the component Inventory Edit Item Page. The manipulation of the argument Item Name results in cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS3.6AI score0.00033EPSS
Exploits0References1
NVD
NVD
added 2026/04/20 4:16 p.m.0 views

CVE-2026-6651

A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability affects unknown code of the component Inventory Edit Item Page. The manipulation of the argument Item Name results in cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS0.00033EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/20 2:45 p.m.29 views

CVE-2026-6651 erponline.xyz ERP Online Inventory Edit Item cross site scripting

A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability affects unknown code of the component Inventory Edit Item Page. The manipulation of the argument Item Name results in cross site scripting. The attack may be launched remotely. The exploit has been...

4.8CVSS0.00033EPSS
Exploits0References4
CVE
CVE
added 2026/04/20 2:45 p.m.8 views

CVE-2026-6651

CVE-2026-6651 affects erponline.xyz ERP Online (up to 4.0.0) in the Inventory Edit Item Page. The issue is a cross-site scripting vulnerability triggered by manipulating the Item Name parameter, with a remote attack surface and public exploit availability. The CVSS-derived metrics indicate LOW ov...

4.8CVSS4AI score0.00033EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/20 12:0 a.m.6 views

ERP Online 安全漏洞

ERP Online is an enterprise management system developed by ERP Online Company. Versions of ERP Online 4.0.0 and earlier contained security vulnerabilities. These vulnerabilities were caused by improper handling of parameters named “Item Name” in the “Inventory Edit Item Page” component, which cou...

4.8CVSS5.6AI score0.00033EPSS
Exploits0References1
CVE
CVE
added 2025/09/23 1:32 a.m.14 views

CVE-2025-10830

CVE-2025-10830 affects Campcodes Computer Sales and Inventory System 1.0. The vulnerability is in the /pages/inv_edit1.php handling of the idd parameter, where manipulation can cause a SQL injection. It is described as exploitable remotely and with a published exploit. Connected documents corrobo...

9.8CVSS6.7AI score0.00046EPSS
Exploits1References5Affected Software1
RedHat Linux
RedHat Linux
added 2023/09/18 6:16 p.m.42 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS6.8AI score0.00406EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/17 2:15 p.m.2 views

CVE-2022-31357

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...

9.8CVSS7.4AI score0.00264EPSS
Exploits1References2
OSV
OSV
added 2022/06/17 2:15 p.m.2 views

CVE-2022-31357

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...

9.8CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2022/06/17 12:0 a.m.1 views

Online Ordering System SQL注入漏洞

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/inventory/index.php?view=edit & id=Lack of validation of external input SQL statemen...

9.8CVSS6AI score0.00264EPSS
Exploits1References2
Rows per page
Query Builder