1338 matches found
CVE-2024-42580
A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42586
A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42584
A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42577
A Cross-Site Request Forgery CSRF in the component addproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42576
The Warehouse Inventory System v2.0 is vulnerable to a Cross-Site Request Forgery (CSRF) in the edit_categorie.php component. The root cause is the component's failure to adequately verify that requests originate from a trusted user, which allows an attacker to spoof a malicious request. This can...
CVE-2024-42585
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Warehouse Inventory System v2.0 . The issue stems from the delete_media.php component failing to adequately verify that incoming requests originate from a trusted user. An attacker can exploit this weakness to spoof malicious request...
CVE-2024-42580
CVE-2024-42580 describes a Cross-Site Request Forgery in the Warehouse Inventory System v2.0, specifically in the edit_group.php component, enabling privilege escalation. The vulnerability stems from inadequate CSRF protection on requests to edit_group.php, with impacts limited to the affected co...
CVE-2024-42581
The Warehouse Inventory System v2.0 is vulnerable to a Cross-Site Request Forgery (CSRF) in the delete_group.php component. The root cause is the component's failure to adequately verify that requests originate from a trusted user. An attacker can exploit this by spoofing a malicious request to t...
CVE-2024-42583
CVE-2024-42583 affects Warehouse Inventory System v2.0 in the delete_user.php component. A Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to escalate privileges by spoofing a request to delete or act on users. The root cause is inadequate verification that requests originate f...
CVE-2024-42586
The Warehouse Inventory System v2.0 is vulnerable to a Cross-Site Request Forgery (CSRF) in the categorie.php component. The root cause is a failure to adequately validate whether incoming requests originate from a trusted user. An attacker can exploit this to spoof malicious requests, tricking a...
CVE-2024-42582
CVE-2024-42582 describes a Cross-Site Request Forgery (CSRF) in the Warehouse Inventory System v2.0, specifically in the delete_categorie.php component. The vulnerability enables privilege escalation and is consistently reported across sources, with Red Hat and CNVD notes reinforcing that request...
CVE-2024-42579
CVE-2024-42579 is a CSRF vulnerability in the Warehouse Inventory System v2.0, specifically in the add_group.php component, as described across multiple sources. The underlying issue is that requests from untrusted sources may be coerced to perform privileged actions, enabling privilege escalatio...
CVE-2024-42577
CVE-2024-42577 describes a Cross-Site Request Forgery in Warehouse Inventory System v2.0, specifically the add_product.php component, which can lead to privilege escalation. Red Hat and CNVD entries reiterate that the issue stems from insufficient checks on request origin/verification, enabling a...
CVE-2024-42578
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Warehouse Inventory System v2.0 within the edit_product.php component. The flaw stems from the component's failure to adequately verify that requests originate from a trusted user. An attacker can exploit this by spoofing a malicious...
CVE-2024-42578
A Cross-Site Request Forgery CSRF in the component editproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42586
A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42576
A Cross-Site Request Forgery CSRF in the component editcategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42582
A Cross-Site Request Forgery CSRF in the component deletecategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...