CVE-2024-2067

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

Sql injection

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

Cross site scripting

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-2067 SourceCodester Computer Inventory System delete-computer.php sql injection

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

CVE-2024-2067

SourceCodester Computer Inventory System 1.0 has a SQL injection vulnerability in /endpoint/delete-computer.php triggered by manipulating the computer parameter. The flaw is exploitable remotely and is considered critical by CVE-2024-2067; multiple sources report the exploit publicly. No official...

CVE-2024-2066 SourceCodester Computer Inventory System add-computer.php cross site scripting

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-2066 SourceCodester Computer Inventory System add-computer.php cross site scripting

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-2066

CVE-2024-2066 affects SourceCodester Computer Inventory System 1.0, with a Cross-Site Scripting (XSS) flaw in /endpoint/add-computer.php triggered via the model argument. The root cause is input manipulation that leads to XSS, allowing remote initiation. Several connected sources confirm the vuln...

Computer Inventory System Cross-Site Scripting Vulnerability

Computer Inventory System is a computer inventory system for rems individual developers. A cross-site scripting vulnerability exists in Computer Inventory System version 1.0, which stems from a cross-site scripting issue in the /endpoint/update-computer.php file...

Computer Inventory System Cross-Site Scripting Vulnerability

Computer Inventory System is a computer inventory system for rems individual developers. A cross-site scripting vulnerability exists in Computer Inventory System version 1.0, which stems from a cross-site scripting issue in the /endpoint/add-computer.php file...

Computer Inventory System SQL Injection Vulnerability

Computer Inventory System is a computer inventory system by rems individual developers. A SQL injection vulnerability exists in Computer Inventory System version 1.0, which stems from an SQL injection issue in the /endpoint/delete-computer.php file...

PT-2024-18692 · Sourcecodester · Sourcecodester Computer Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Inventory System version 1.0 Description: A critical issue has been identified, affecting the /endpoint/delete-computer.php file. The manipulation of the computer argument leads to SQL injection. This issue can be...

CVE-2023-51813

Cross Site Request Forgery CSRF vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the stafflist parameter in the index.php component...

CVE-2023-7157

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /app/ajax/sellreturndata.php. The manipulation of the argument columns0data leads to sql injection. The attack may be...

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which originates from a security issue in the /app/ajax/sellreturndata.php page...

CVE-2023-7075

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /main/checkout.php. The manipulation of the argument pt leads to cross site scripting. The attack may be...

BigProf Online Invoicing System Cross-Site Scripting Vulnerability

BigProf Online Invoicing System OIS is an online invoicing system. A cross-site scripting vulnerability exists in BigProf Online Inventory Manager version 3.2, which stems from a cross-site scripting vulnerability in the FirstRecord parameter of /inventory/suppliersview.php...

CVE-2023-6306

A vulnerability classified as critical has been found in SourceCodester Free and Open Source Inventory Management System 1.0. Affected is an unknown function of the file /ample/app/ajax/memberdata.php. The manipulation of the argument columns leads to sql injection. It is possible to launch the...

PT-2023-32605 · Unknown · Sourcecodester Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: A critical issue affects the processing of the file ample/app/ajax/suppliar data.php, where the manipulation of the columns argument leads to SQL...

CVE-2023-46449

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function...