4774 matches found
CVE-2023-6306
A vulnerability classified as critical has been found in SourceCodester Free and Open Source Inventory Management System 1.0. Affected is an unknown function of the file /ample/app/ajax/memberdata.php. The manipulation of the argument columns leads to sql injection. It is possible to launch the...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Free and Open Source Inventory Management System 1.0. Affected is an unknown function of the file /ample/app/ajax/memberdata.php. The manipulation of the argument columns leads to sql injection. It is possible to launch the...
CVE-2023-6305
A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file ample/app/ajax/suppliardata.php. The manipulation of the argument columns leads to sql injection. The attack may ...
Sql injection
A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file ample/app/ajax/suppliardata.php. The manipulation of the argument columns leads to sql injection. The attack may ...
CVE-2023-6306
The CVE-2023-6306 entry affects SourceCodester Free and Open Source Inventory Management System 1.0. It targets the file /ample/app/ajax/member_data.php, where manipulating the columns argument enables SQL injection. The flaw can be exploited remotely and the vulnerability has been publicly discl...
CVE-2023-6305 SourceCodester Free and Open Source Inventory Management System suppliar_data.php sql injection
A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file ample/app/ajax/suppliardata.php. The manipulation of the argument columns leads to sql injection. The attack may ...
CVE-2023-6305
CVE-2023-6305 affects SourceCodester Free and Open Source Inventory Management System 1.0. The vulnerability exists in the file ample/app/ajax/suppliar_data.php where manipulation of the columns argument enables SQL injection. The issue can be triggered remotely and is disclosed publicly. Connect...
PT-2023-32605 · Unknown · Sourcecodester Free/Open Source Inventory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: A critical issue affects the processing of the file ample/app/ajax/suppliar data.php, where the manipulation of the columns argument leads to SQL...
Free and Open Source Inventory Management System SQL Injection Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...
PT-2023-32606 · Unknown · Sourcecodester Free/Open Source Inventory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /ample/app/ajax/member data.php. The manipulation of the columns argument...
Inventory Management System SQL Injection Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...
Dell Command Monitor Elevation of Privilege Vulnerability
The Dell Command Monitor software application enables IT administrators to easily manage fleet inventory, monitor system operating conditions, modify BIOS settings, and remotely collect information from deployed Dell client systems. Proactive system health monitoring can help reduce total system...
Why less is more: 10 steps to secure customer data
In an advisory aimed at the protection of customers’ personal data, the Australian Cyber Security Centre ACSC has emphasized that businesses should only collect personal data from customers that they need in order to operate effectively. While that may seem like kicking in an open door, it’s real...
The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management system, related to the unlimited loading of dangerous type files, allows a violator to load any files into the system.
The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the unlimited ability to upload dangerous files. Exploiting this vulnerability allows a malicious actor to upload any files into the system...
The vulnerability of the GLPI system’s request, incident, and asset inventory management, related to insecure privilege management, allows a malicious actor to gain unauthorized access to any user’s account.
The vulnerability of the GLPI system for requests, incidents, and inventory management is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the account of any user...
The vulnerability of the Kanban function in the GLPI system for scheduling, incident management, and inventory tracking allows a malicious individual to gain unauthorized access to any user’s account.
The vulnerability of the Kanban function in systems for requests, incidents, and inventory management of computer equipment in GLPI is related to insecure privilege management. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the account of any user...
The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment arises from the use of a field in the ITIL form for submitting requests, which allows an attacker to obtain the administrator’s account information.
The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment lies in the use of a input field for ITIL entities in the request form. Exploiting this vulnerability could allow a malicious actor to gain access to the administrator’s account by sending a...
CVE-2023-46581
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...
