PT-2024-23175 · Unknown · Bdtask Multi-Store Inventory Management System

Name of the Vulnerable Software and Affected Versions: Bdtask Multi-Store Inventory Management System versions up to 20240320 Description: A problematic issue was found in the Store Update Page component of the Bdtask Multi-Store Inventory Management System. The manipulation of the Store Name and...

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system for stemword individual developers. A cross-site scripting vulnerability exists in Bdtask Multi-Store Inventory Management System 20240320 and prior versions, which stems from a cross-site scripting XSS vulnerability in the component...

Inventory Management System 安全漏洞

Inventory Management System is an inventory management system for stemword individual developers. A security vulnerability exists in Bdtask Multi-Store Inventory Management System 20240320 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the component Page Title...

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to deficiencies in authorization procedures, allows unauthorized users to gain access to protected information.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to deficiencies in authorization procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the lack of protection for the website structure, allows a hacker to execute arbitrary SQL code.

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code in the search engine to extrac...

CVE-2024-2639

A vulnerability was found in Bdtask Wholesale Inventory Management System up to 20240311. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to session fixiation. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-2639 Bdtask Wholesale Inventory Management System session fixiation

A vulnerability was found in Bdtask Wholesale Inventory Management System up to 20240311. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to session fixiation. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-2639

Affects Bdtask Wholesale Inventory Management System (up to 20240311). Multiple sources confirm a session fixation vulnerability in an unknown functionality, exploitable remotely and publicly disclosed. The root cause is not explicitly detailed across documents, but remediation guidance suggests ...

Inventory Management System Authorization Issues Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. An authorization issue vulnerability exists in Bdtask Wholesale Inventory Management System 20240311 and prior versions, which stems from a session fixation issue...

Understanding the OWASP API Security Top 10: Why BOLA is the Number One Risk for APIs

Understanding and addressing vulnerabilities is critical in cybersecurity, where APIs serve as the backbone for seamless data exchange. The OWASP API Security Top 10, revised in 2023, provides a comprehensive guide to the critical issues that organizations must tackle to ensure the robust securit...

CVE-2024-1926

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...

CVE-2024-1926

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...

Sql injection

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...

CVE-2024-1926 SourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...

CVE-2024-1926 SourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...

CVE-2024-1926

CVE-2024-1926 affects SourceCodester Free and Open Source Inventory Management System 1.0. The vulnerability is a SQL injection in the file /app/ajax/search_sales_report.php triggered by manipulating the customer parameter, with remote exploitation possible. Public disclosure exists. Impact is hi...

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect operation of the parameter customer that can lead to an SQL injectio...

Simple Inventory Management System v1.0 - 'email' SQL Injection

Exploit Title: Simple Inventory Management System v1.0 - 'email' SQL Injection Google Dork: N/A Application: Simple Inventory Management System Date: 26.02.2024 Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2023-51813

Cross Site Request Forgery CSRF vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the stafflist parameter in the index.php component...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the stafflist parameter in the index.php component...