Lucene search
+L

4786 matches found

NVD
NVD
added 2024/08/20 1:15 p.m.23 views

CVE-2024-42581

A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

9.6CVSS0.00307EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/20 1:15 p.m.21 views

CVE-2024-42577

A Cross-Site Request Forgery CSRF in the component addproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS0.00307EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/20 1:15 p.m.20 views

CVE-2024-42579

A Cross-Site Request Forgery CSRF in the component addgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS0.00307EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/20 1:15 p.m.8 views

CVE-2024-42580

A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS5.8AI score0.00222EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/20 1:15 p.m.10 views

CVE-2024-42576

A Cross-Site Request Forgery CSRF in the component editcategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS5.8AI score0.00307EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/20 1:15 p.m.10 views

CVE-2024-42582

A Cross-Site Request Forgery CSRF in the component deletecategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS5.8AI score0.00307EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/20 1:15 p.m.20 views

CVE-2024-42576

A Cross-Site Request Forgery CSRF in the component editcategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS0.00307EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/20 1:15 p.m.27 views

CVE-2024-42582

A Cross-Site Request Forgery CSRF in the component deletecategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS0.00307EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/20 1:15 p.m.6 views

CVE-2024-42578

A Cross-Site Request Forgery CSRF in the component editproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8CVSS5.8AI score0.00299EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/20 1:15 p.m.7 views

CVE-2024-42577

A Cross-Site Request Forgery CSRF in the component addproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS5.8AI score0.00307EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/20 1:15 p.m.20 views

CVE-2024-42578

A Cross-Site Request Forgery CSRF in the component editproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8CVSS0.00299EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/20 1:15 p.m.22 views

CVE-2024-42580

A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS0.00222EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/20 1:15 p.m.7 views

CVE-2024-42564

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete...

7.6CVSS5.8AI score0.0044EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/20 2:15 a.m.16 views

CVE-2024-7947

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS5.8AI score0.00701EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/08/20 1:31 a.m.35 views

CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS0.00701EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/08/20 1:31 a.m.21 views

CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS7.7AI score0.00701EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/08/20 12:00 a.m.12 views

PT-2024-30048 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the categorie.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disablin...

8.8CVSS7.7AI score0.00301EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/08/20 12:00 a.m.9 views

SourceCodester Point of Sales and Inventory Management System SQL注入漏洞

SourceCodester Point of Sales and Inventory Management System is a point of sale and inventory management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Point of Sales and Inventory Management System version 1.0, which originates from a SQL injection...

9.8CVSS7.9AI score0.00701EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/08/20 12:00 a.m.14 views

CVE-2024-42580

A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

7.5AI score0.00222EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/08/20 12:00 a.m.15 views

PT-2024-30045 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete user.php component allows attackers to escalate privileges, potentially leading to unauthorized user deletion. Recommendations: For...

8.8CVSS7.6AI score0.00307EPSS
SaveExploits1References5
Rows per page
Query Builder