CVE-2024-32212

SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute arbitrary code via the ArticleGetGroups, DocAddDocument, ClassClickShop and frmSettings components...

LOGINT LoMag Inventory Management SQL注入漏洞

LOGINT LoMag Inventory Management is an inventory management system from LOGINT. A SQL injection vulnerability exists in LOGINT LoMag Inventory Management v1.0.20.120 and earlier versions, which originates from a vulnerability that allows an attacker to execute Arbitrary code...

CVE-2024-32212

The CVE-2024-32212 entry affects LOGINT LoMag Inventory Management, version 1.0.20.120 and earlier. It describes a SQL injection vulnerability in the ArticleGetGroups, DocAddDocument, ClassClickShop, and frmSettings components that could allow an attacker to execute arbitrary code. This aligns wi...

PT-2024-24462 · Logint · Logint Lomag Inventory Management

Name of the Vulnerable Software and Affected Versions: LOGINT LoMag Inventory Management versions 1.0.20.120 and before Description: The issue allows a local attacker to obtain sensitive information via the UserClass.cs and Settings.cs components. Recommendations: For versions 1.0.20.120 and...

LOGINT LoMag Inventory Management 安全漏洞

LOGINT LoMag Inventory Management is an inventory management system from LOGINT. A security vulnerability exists in LOGINT LoMag Inventory Management v1.0.20.120 and earlier versions, which stems from a vulnerability that could allow a local attacker to obtain sensitive information via the...

CVE-2024-32211

An issue in LOGINT LoMag Inventory Management v1.0.20.120 and before allows a local attacker to obtain sensitive information via the UserClass.cs and Settings.cs components...

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL request structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management functions is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

AMPLE BILLS 0.1 SQL injection

Title: AMPLE BILLS 0.1 Multiple-SQLi Author: nu11secur1ty Date: 04/13/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html Reference: https://portswigger.net/web-security/sql-injection...

CVE-2024-3151

A vulnerability, which was classified as problematic, was found in Bdtask Multi-Store Inventory Management System up to 20240325. Affected is an unknown function of the file /stockmovment/stockmovment/delete/ of the component Stock Movement Page. The manipulation leads to cross-site request...

CVE-2024-3151 Bdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgery

A vulnerability, which was classified as problematic, was found in Bdtask Multi-Store Inventory Management System up to 20240325. Affected is an unknown function of the file /stockmovment/stockmovment/delete/ of the component Stock Movement Page. The manipulation leads to cross-site request...

Inventory Management System 跨站请求伪造漏洞

Inventory Management System is an inventory management system by stemword individual developers. A cross-site request forgery vulnerability exists in Bdtask Multi-Store Inventory Management System version 20240325 and earlier. An attacker could exploit this vulnerability to perform a cross-site...

Inventory Management System Category Name Parameter Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system. Inventory Management System 20240320 and earlier versions suffer from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameters Category Name/Model...

CVE-2024-2998

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Store Update Page. The manipulation of the argument Store Name/Store Address leads to cross site...

CVE-2024-2997

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting...

CVE-2024-2998 Bdtask Multi-Store Inventory Management System Store Update Page cross site scripting

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Store Update Page. The manipulation of the argument Store Name/Store Address leads to cross site...

CVE-2024-2998 Bdtask Multi-Store Inventory Management System Store Update Page cross site scripting

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Store Update Page. The manipulation of the argument Store Name/Store Address leads to cross site...

CVE-2024-2997 Bdtask Multi-Store Inventory Management System cross site scripting

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting...

CVE-2024-2997 Bdtask Multi-Store Inventory Management System cross site scripting

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting...

CVE-2024-2996 Bdtask Multi-Store Inventory Management System Page Title cross site scripting

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as problematic. Affected is an unknown function of the component Page Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The...

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system. Inventory Management System 20240320 and earlier versions suffer from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameters Category Name/Model...