Lucene search
+L

995 matches found

OSV
OSV
added 2025/10/08 2:15 p.m.8 views

CVE-2025-60314

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...

5.4CVSS6AI score0.00253EPSS
SaveExploits1References3
OSV
OSV
added 2025/10/08 4:16 a.m.10 views

CVE-2025-11431

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS5.7AI score0.00398EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/08 4:02 a.m.28 views

CVE-2025-11431

Code-Projects Web-Based Inventory and POS System 1.0 contains an SQL injection in the /transaction.php file, triggered by manipulating the shopid parameter in an unknown function. Remote exploitation is possible, and public disclosure of the exploit is noted in multiple sources. Affected componen...

9.8CVSS6.4AI score0.00398EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/08 4:02 a.m.24 views

CVE-2025-11431 code-projects Web-Based Inventory and POS System transaction.php sql injection

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

6.5CVSS0.00398EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/08 2:15 a.m.17 views

CVE-2025-11424

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

9.8CVSS0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 2:02 a.m.6 views

CVE-2025-11424 code-projects Web-Based Inventory and POS System login.php sql injection

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

7.5CVSS6.6AI score0.00478EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/10/08 12:00 a.m.10 views

code-projects Web-Based Inventory and POS System 安全漏洞

Code-Projects Web-Based Inventory and POS System is a web-based inventory and POS system from Code-Projects open source. A security vulnerability exists in version 1.0 of the code-projects Web-Based Inventory and POS System, which stems from an incorrect manipulation of the parameter emailid in t...

9.8CVSS7.7AI score0.00478EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/08 12:00 a.m.15 views

PT-2025-41222

Name of the Vulnerable Software and Affected Versions code-projects Web-Based Inventory and POS System version 1.0 Description A flaw exists in code-projects Web-Based Inventory and POS System. The issue is related to SQL injection, triggered by manipulating the shopid argument in a file named...

9.8CVSS6.9AI score0.00398EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2021-12113

Malware in sbrugna...

9.8CVSS9.4AI score0.01517EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-10520

Malware in sbrugna...

9.8CVSS9.4AI score0.03213EPSS
SaveExploits5References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-16022

Malware in sbrugna...

5.4CVSS5.5AI score0.00774EPSS
SaveExploits1References3
Redos
Redos
added 2025/10/07 12:00 a.m.7 views

ROS-20251007-04

A vulnerability in GLPI's computer hardware request, incident, and inventory system is related to a key-based authorization bypass. key authorization. Exploitation of the vulnerability could allow a remote intruder, compromise the system Vulnerability in the GLPI computer equipment request,...

6.5CVSS4.9AI score0.00262EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.7 views

EUVD-2025-14227

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00525EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-23621

Malicious code in bioql PyPI...

5.4CVSS4.9AI score0.00551EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2025-21264

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00511EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2025-19469

Malicious code in bioql PyPI...

7.2CVSS5AI score0.00343EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2024-46354

Malicious code in bioql PyPI...

6.9CVSS4.9AI score0.00373EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.17 views

EUVD-2025-21216

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.0041EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2025-29136

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00415EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.18 views

EUVD-2025-30427

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00421EPSS
SaveExploits1References7
Rows per page
Query Builder