PT-2022-19349 · Unknown · Bdtask Multi-Store Inventory Management System

Name of the Vulnerable Software and Affected Versions: Multi Store Inventory Management System version 1.0 Description: The issue allows attackers to perform an account takeover by sending a crafted POST request. Recommendations: For Multi Store Inventory Management System version 1.0, update to ...

Multi Store Inventory Management System授权问题漏洞

Multi Store Inventory Management System is a multi-store inventory management system. version 1.0 of Multi Store Inventory Management System is vulnerable to an authorization issue. An attacker can exploit this vulnerability to perform an account takeover via a specially crafted POST request...

PT-2022-19347 · Unknown · Bdtask Multi-Store Inventory Management System

Name of the Vulnerable Software and Affected Versions: Multi Store Inventory Management System version 1.0 Description: The issue allows attackers to access sensitive files due to an information disclosure problem. Recommendations: For Multi Store Inventory Management System version 1.0, at the...

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40272)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=inventory/manageinventory& id= for SQL injection attacks...

CVE-2022-30396

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=inventory/manageinventory&id=...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=inventory/manageinventory& id= for SQL injection attacks...

Social Codia SMS Arbitrary File Upload Vulnerability

Social Codia SMS is an inventory management system from Social Codia India. v1.0 of Social Codia SMS is vulnerable to arbitrary file uploads, which can be exploited by attackers to execute arbitrary code via crafted PHP files...

Social Codia SMS Cross-Site Scripting Vulnerability

Social Codia SMS is an inventory management system from Social Codia India. v1.0 of Social Codia SMS is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to execute arbitrary Web script or HTML by injecting a specially crafted payload into the post title text...

Inventory Management System 1.0 Cross Site Scripting

Title: Inventory Management System 1.0 XSS Stored Author: Hejap Zairy Date: 12.07.2022 Vendor: https://www.vetbossel.in/inventory-management-system-php/ Software: https://cutt.ly/lOZ8lrr Reference: https://github.com/Matrix07ksa Tested on: ArchLinux, MySQL, Apache Description: Stored XSS, also...

CVE-2021-44321

Affected software: Mini-Inventory-and-Sales-Management-System (PHP CodeIgniter; supports MySQL/SQLite). Vulnerability: Cross-Site Request Forgery (CSRF) that allows an attacker to update/delete inventory items. Root cause/impact: The vulnerability enables manipulation of inventory details when an...

Mini-Inventory-and-Sales-Management-System 跨站请求伪造漏洞

Mini-Inventory-and-Sales-Management-System is an inventory and sales management system written in PHP codeIgniter with support for MySQL and Sqlite3 databases. A cross-site request forgery vulnerability exists in Mini-Inventory-and-Sales-Management-System version 1.0, which stems from...

How to Choose the Right Inventory Management Software

By Owais Sultan Inventory management software is a type of software that helps businesses keep track of the products they have… This is a post from HackRead.com Read the original post: How to Choose the Right Inventory Management Software...

CVE-2022-24301

In Minetest before 5.4.0, players can add or subtract items from a different player's inventory...

PartKeepr server-side request forgery vulnerability

PartKeepr is an inventory management software designed primarily for electronic components.PartKeepr suffers from a server-side request forgery vulnerability, which stems from the fact that the ability to upload attachments using a URL when creating a part does not validate whether a request can ...

PartKeepr Information Disclosure Vulnerability

PartKeepr is an inventory management software designed primarily for electronic components. a security vulnerability exists in PartKeepr, which stems from the use of a file:// URL that allows attachments to be loaded when creating parts, which can be exploited by an authenticated attacker to read...

Oracle Primavera Gateway (Oct 2021 CPU)

The version of Primavera Gateway installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory, including the following: - Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications component: SIM...

Improper Assets Management☝️ — What you need to know

Improper Assets Management☝️ — What you need to know Introduction API9:2019 Improper Assets Management What is Improper Assets Management? We should always wonder for every API if all the current endpoint should even be available and if we maybe can’t do with only allowing the API to communicate...

SourceCodester Sales and Inventory System SQL Injection Vulnerability

Bakeshop Inventory System is a bakery inventory management system. sourceCodester Sales and Inventory System has a security vulnerability that can be exploited by remote attackers to execute arbitrary SQL statements via the id parameter to ahiraadmin Inventory . php...

The vulnerability in the “Export to Reporting and Analytics” sub-component of the Oracle Hospitality Inventory Management component of the Oracle Food and Beverage Applications suite allows a malicious individual to gain unauthorized access to the device.

The vulnerability of the “Export to Reporting and Analytics” sub-component of the Oracle Hospitality Inventory Management component in the Oracle Food and Beverage Applications suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operatin...

CVE-2021-2311

Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications component: Export to Reporting and Analytics. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...