1282 matches found
Cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument companyname/province/city/phonenumber leads to cross site...
CVE-2023-1179
CVE-2023-1179 affects SourceCodester Computer Parts Sales and Inventory System 1.0. The vulnerability exists in the Add Supplier Handler where manipulating the arguments company_name, province, city, or phone_number can lead to cross-site scripting. Exploitation is possible remotely and, per sour...
CVE-2023-1179 SourceCodester Computer Parts Sales and Inventory System Add Supplier cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument companyname/province/city/phonenumber leads to cross site...
CVE-2023-1179: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument companyname/province/city/phonenumber leads to cross site...
CVE-2023-1131
A vulnerability has been found in SourceCodester Computer Parts Sales and Inventory System 1.0 and classified as problematic. This vulnerability affects unknown code of the file customer.php. The manipulation of the argument FIRSTNAME/LASTNAME/PHONENUMBER leads to cross site scripting. The attack...
CVE-2023-1131
CVE-2023-1131 affects the SourceCodester Computer Parts Sales and Inventory System 1.0. The vulnerability is a cross-site scripting flaw in the file customer.php , triggered by manipulating the arguments FIRST_NAME/LAST_NAME/PHONE_NUMBER . It can be exploited remotely, and the exploit has been di...
CVE-2023-1130
CVE-2023-1130 affects SourceCodester Computer Parts Sales and Inventory System 1.0, specifically the vulnerable part within the file processlogin . The root cause is improper handling of the user parameter, enabling SQL injection . This can be exploited remotely and, according to the sources, the...
CVE-2023-1130 SourceCodester Computer Parts Sales and Inventory System processlogin sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file processlogin. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...
SourceCodester Computer Parts Sales and Inventory System SQL注入漏洞
Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A SQL injection vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which originates from an unknown part of the...
PT-2023-16777 · Sourcecodester · Sourcecodester Computer Parts Sales/Inventory System
Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Parts Sales and Inventory System version 1.0 Description: A vulnerability has been found in the SourceCodester Computer Parts Sales and Inventory System, affecting unknown code of the file customer.php. The manipulatio...
CVE-2023-1131: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in SourceCodester Computer Parts Sales and Inventory System 1.0 and classified as problematic. This vulnerability affects unknown code of the file customer.php. The manipulation of the argument FIRSTNAME/LASTNAME/PHONENUMBER leads to cross site scripting. The attack...
CVE-2023-1130: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file processlogin. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2023-23014
Cross Site Scripting XSS vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c on Apr 23, 2021 via editstorename and editactive inputs in file InventorySystem.php...
PT-2023-18820 · Unknown · Inventorysystem
Name of the Vulnerable Software and Affected Versions: InventorySystem affected versions not specified Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the InventorySystem via the edit store name and edit active inputs in the file InventorySystem.php...
PT-2022-22920 · Unknown · Inventory Management System
Name of the Vulnerable Software and Affected Versions: InventoryManagementSystem version 1.0 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands via the searchTxt parameter. Recommendations: For InventoryManagementSystem version 1.0, consider restricting access t...
PT-2022-22917 · Unknown · Sazanrjb Inventorymanagementsystem
Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in SupplierDAO.java allows attackers to execute arbitrary SQL commands via the searchTxt parameter. This enables unauthorized access and manipulation of databas...
Stock Management System SQL Injection Vulnerability (CNVD-2022-53256)
Stock Management System is an inventory management system. A SQL injection vulnerability exists in Stock Management System v1.0, which originates from a lack of validation of the id parameter in /isms/admin/stocks/viewstock.php against an externally entered SQL statement. An attacker can exploit...
Simple Inventory System SQL Injection Vulnerability
Simple Inventory System is an inventory system. version 1.0 of Simple Inventory System is vulnerable to SQL injection attacks via /inventory/login.php...
Simple Inventory System SQL Injection Vulnerability (CNVD-2022-66664)
Simple Inventory System is an inventory system. version 1.0 of Simple Inventory System is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks via /inventory/tableeditajax.php...