CVE-2024-42585

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Warehouse Inventory System v2.0 . The issue stems from the delete_media.php component failing to adequately verify that incoming requests originate from a trusted user. An attacker can exploit this weakness to spoof malicious request...

CVE-2024-42577

A Cross-Site Request Forgery CSRF in the component addproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

PT-2024-30038 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF in the component add product.php of Warehouse Inventory System allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System...

CVE-2024-42581

A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42578

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Warehouse Inventory System v2.0 within the edit_product.php component. The flaw stems from the component's failure to adequately verify that requests originate from a trusted user. An attacker can exploit this by spoofing a malicious...

CVE-2024-42576

The Warehouse Inventory System v2.0 is vulnerable to a Cross-Site Request Forgery (CSRF) in the edit_categorie.php component. The root cause is the component's failure to adequately verify that requests originate from a trusted user, which allows an attacker to spoof a malicious request. This can...

PT-2024-30047 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version v2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete media.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version v2.0, consider...

CVE-2024-42586: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42581: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42580: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42578: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component editproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42585: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42579: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component addgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-7947: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-42586

The Warehouse Inventory System v2.0 is vulnerable to a Cross-Site Request Forgery (CSRF) in the categorie.php component. The root cause is a failure to adequately validate whether incoming requests originate from a trusted user. An attacker can exploit this to spoof malicious requests, tricking a...

Warehouse Inventory System security vulnerabilities

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addgroup.php component not adequately verifying that a request comes from a trusted...

Warehouse Inventory System security vulnerabilities

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addproduct.php component not adequately verifying that a request comes from a truste...

CVE-2024-42564

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete...

CVE-2024-42576: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component editcategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42583: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...