Lucene search
+L

1349 matches found

EUVD
EUVD
•added 2026/03/30 6:31 p.m.•37 views

EUVD-2026-17096

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.0031EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/03/30 6:31 p.m.•21 views

EUVD-2026-17098

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addsales.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML...

6AI score0.0031EPSS
SaveExploits1References2
NVD
NVD
•added 2026/03/30 4:16 p.m.•21 views

CVE-2026-30557

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.1CVSS0.0031EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/30 4:16 p.m.•17 views

CVE-2026-30559

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addsales.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML...

6.1CVSS0.0031EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/30 4:16 p.m.•29 views

CVE-2026-30562

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addstock.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML...

9.3CVSS0.00472EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/30 3:32 p.m.•21 views

EUVD-2026-17104

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewsupplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.0031EPSS
SaveExploits1References2
NVD
NVD
•added 2026/03/30 3:16 p.m.•24 views

CVE-2026-30565

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewsupplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS0.0031EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30565

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewsupplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.2AI score0.0031EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•18 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter limit...

6.1CVSS5.6AI score0.0031EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30564

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.2AI score0.0031EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•25 views

PT-2026-29053

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

6AI score0.0031EPSS
SaveExploits1References2
CVE
CVE
•added 2026/03/30 12:00 a.m.•34 views

CVE-2026-30557

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 . The flaw is located in the add_category.php file due to the improper sanitization of the "msg" parameter. This allows remote attackers to inject arbitrary web scripts or HTML by providin...

6.1CVSS6.2AI score0.0031EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•22 views

PT-2026-29032

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view supplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script o...

6.1CVSS6AI score0.0031EPSS
SaveExploits1References2
CVE
CVE
•added 2026/03/30 12:00 a.m.•36 views

CVE-2026-30556

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 . The flaw is located in the index.php file due to the application's failure to properly sanitize the "msg" parameter. This allows a remote attacker to inject arbitrary web scripts or HTML...

6.1CVSS6.2AI score0.0031EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2026/03/30 12:00 a.m.•39 views

CVE-2026-30559

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 . The flaw is located in the add_sales.php file due to the application's failure to sanitize the msg parameter. This allows remote attackers to inject arbitrary web scripts or HTML via a c...

6.1CVSS6.2AI score0.0031EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•5 views

CVE-2026-30560: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addsupplier.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.1CVSS6AI score0.0031EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/03/30 12:00 a.m.•35 views

CVE-2026-30556

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

0.0031EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•13 views

CVE-2026-30561

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addpurchase.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.0031EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•11 views

CVE-2026-30559

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addsales.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML...

6AI score0.0031EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•28 views

PT-2026-29039

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add category.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6AI score0.0031EPSS
SaveExploits1References2
Rows per page
Query Builder