Lucene search
+L

995 matches found

Vulnrichment
Vulnrichment
added 2025/05/10 2:00 p.m.8 views

CVE-2025-4503 Campcodes Sales and Inventory System customer_update.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/customerupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has bee...

7.5CVSS7.7AI score0.00525EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/10 2:00 p.m.75 views

CVE-2025-4503

CVE-2025-4503 affects Campcodes Sales and Inventory System 1.0. The vulnerability is an SQL injection in the file /pages/customer_update.php caused by manipulating the ID parameter. It is described as exploitable remotely with public disclosures. The CVSS data across sources indicate high-impact ...

9.8CVSS7.5AI score0.00525EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/10 2:00 p.m.36 views

CVE-2025-4503 Campcodes Sales and Inventory System customer_update.php sql injection

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/customerupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has bee...

7.5CVSS0.00525EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/10 1:31 p.m.80 views

CVE-2025-4502

CVE-2025-4502 concerns Campcodes Sales and Inventory System 1.0. A SQL injection vulnerability resides in the creditor_add.php file, enabling remote exploitation. Multiple connected sources consistently describe a critical impact from manipulating this file, with exploitation disclosed publicly. ...

9.8CVSS7.5AI score0.00507EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/10 1:31 p.m.10 views

CVE-2025-4502 Campcodes Sales and Inventory System creditor_add.php sql injection

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditoradd.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS7.5AI score0.00507EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/05/10 1:31 p.m.40 views

CVE-2025-4502 Campcodes Sales and Inventory System creditor_add.php sql injection

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditoradd.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS0.00507EPSS
SaveExploits1References5
NVD
NVD
added 2025/01/09 10:15 a.m.19 views

CVE-2025-0348

A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /data/addemployee.php. The manipulation of the argument data leads to cross site scripting. The attack may be initiated remotely. T...

5.4CVSS0.00519EPSS
SaveExploits1References5
CVE
CVE
added 2025/01/09 10:00 a.m.70 views

CVE-2025-0348

CVE-2025-0348 affects CampCodes DepEd Equipment Inventory System 1.0. The vulnerability is a cross-site scripting flaw triggered by manipulating the data argument in /data/add_employee.php, with remote exploitation possible and the exploit publicly disclosed. Source documents consistently describ...

5.4CVSS3.9AI score0.00519EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/01/09 10:00 a.m.37 views

CVE-2025-0348 CampCodes DepEd Equipment Inventory System add_employee.php cross site scripting

A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /data/addemployee.php. The manipulation of the argument data leads to cross site scripting. The attack may be initiated remotely. T...

5.3CVSS0.00519EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/01/09 10:00 a.m.11 views

CVE-2025-0348 CampCodes DepEd Equipment Inventory System add_employee.php cross site scripting

A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /data/addemployee.php. The manipulation of the argument data leads to cross site scripting. The attack may be initiated remotely. T...

5.3CVSS6.2AI score0.00519EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/09 12:00 a.m.22 views

PT-2025-3843 · Unknown · Campcodes Deped Equipment Inventory System

Name of the Vulnerable Software and Affected Versions: CampCodes DepEd Equipment Inventory System version 1.0 Description: A vulnerability was found in the system, rated as problematic. It affects the processing of the file /data/add employee.php, where the manipulation of the data argument leads...

5.4CVSS4.4AI score0.00519EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.16 views

CampCodes DepEd Equipment Inventory System 代码注入漏洞

CampCodes DepEd Equipment Inventory System is a DepEd equipment inventory system from CampCodes, Inc. A code injection vulnerability exists in version 1.0 of the CampCodes DepEd Equipment Inventory System, which stems from the parameter data being susceptible to cross-site scripting attacks...

5.4CVSS4.8AI score0.00519EPSS
SaveExploits1References5
OSV
OSV
added 2025/01/04 4:15 a.m.6 views

CVE-2025-0201

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/updateaccount.php. The manipulation of the argument username leads to sql injection. The attack may be...

6.5CVSS5.8AI score0.00429EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/04 12:00 a.m.15 views

PT-2025-3773 · Unknown · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /user/search num.php. The manipulation of the search argument...

6.5CVSS7.2AI score0.0052EPSS
SaveExploits1References9
OSV
OSV
added 2025/01/03 8:15 p.m.8 views

CVE-2025-0197

A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability affects unknown code of the file /user/search.php. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS5.8AI score0.00429EPSS
SaveExploits1References5
OSV
OSV
added 2025/01/03 6:15 p.m.9 views

CVE-2025-0195

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/delproduct.php. The manipulation of the argument id leads to sql injection. The attack may be launch...

6.5CVSS5.8AI score0.00429EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/01/03 12:00 a.m.10 views

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS7AI score0.00429EPSS
SaveExploits1References5
CNVD
CNVD
added 2024/08/23 12:00 a.m.29 views

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38209)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addgroup.php component not adequately verifying that a request comes from a trusted...

8.8CVSS6.5AI score0.00307EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/08/23 12:00 a.m.32 views

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38210)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addproduct.php component not adequately verifying that a request comes from a truste...

8.8CVSS6.5AI score0.00307EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/08/23 12:00 a.m.32 views

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38212)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletecategorie.php component not adequately verifying that a request comes from a...

8.8CVSS6.5AI score0.00307EPSS
SaveExploits1References1
Rows per page
Query Builder