Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addproduct.php component not adequately verifying that a request comes from a truste...

CVE-2024-42585

A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addgroup.php component not adequately verifying that a request comes from a trusted...

CVE-2024-42584

A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42579

A Cross-Site Request Forgery CSRF in the component addgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42585

CVE-2024-42585 affects Warehouse Inventory System v2.0, specifically the delete_media.php component. The CSRF vulnerability allows privilege escalation with a high CVSS base score (8.8; AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation is CSRF requiring user interaction, and there is no vendor-s...

PT-2024-30037 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit categorie.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...

PT-2024-30045 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete user.php component allows attackers to escalate privileges, potentially leading to unauthorized user deletion. Recommendations: For...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletecategorie.php component not adequately verifying that a request comes from a...

CVE-2024-42579

A Cross-Site Request Forgery CSRF in the component addgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42584

A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletemedia.php component not adequately verifying that a request comes from a trust...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editgroup.php component not adequately verifying that a request comes from a trusted...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editcategorie.php component not adequately verifying that a request comes from a...

CVE-2024-42583

A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42586

A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

PT-2024-30038 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF in the component add product.php of Warehouse Inventory System allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System...

CVE-2024-42581

CVE-2024-42581 is a CSRF vulnerability in the Warehouse Inventory System v2.0, specifically in the delete_group.php component. The issue allows an attacker to escalate privileges by tricking a user into submitting a malicious request. Affected product/version: Warehouse Inventory System v2.0 (del...

CVE-2024-42580

CVE-2024-42580 describes a Cross-Site Request Forgery in the Warehouse Inventory System v2.0, specifically in the edit_group.php component, enabling privilege escalation. The vulnerability stems from inadequate CSRF protection on requests to edit_group.php, with impacts limited to the affected co...

CVE-2024-42586

Summary: CVE-2024-42586 affects Warehouse Inventory System v2.0, specifically the categorie.php component, where a CSRF vulnerability allows privilege escalation. The CNVD entry notes the issue stems from insufficient validation of requests from trusted users. PT-2024-30048 suggests a mitigation:...