Lucene search
+L

4761 matches found

Cvelist
Cvelist
added 2026/03/30 12:0 a.m.30 views

CVE-2026-30566

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewcustomers.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script o...

0.0021EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/30 12:0 a.m.9 views

EUVD-2026-17103

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.00205EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/30 12:0 a.m.23 views

CVE-2026-30562

CVE-2026-30562 affects SourceCodester Sales and Inventory System 1.0. The vulnerability is a reflected Cross-Site Scripting (XSS) in add_stock.php via the input, where input is not sanitized, allowing attackers to inject arbitrary HTML/script through a crafted URL. Public references note a high-...

9.3CVSS6AI score0.00321EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.17 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter websi...

6.1CVSS5.6AI score0.00174EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/03/30 12:0 a.m.18 views

PT-2026-29039

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add category.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6AI score0.00252EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/03/30 12:0 a.m.24 views

CVE-2026-30556

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

0.00252EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.14 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter limit...

6.1CVSS5.6AI score0.0021EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/03/30 12:0 a.m.2 views

CVE-2026-30557

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00252EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.19 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter msg i...

6.1CVSS5.6AI score0.00252EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/03/30 12:0 a.m.3 views

CVE-2026-30564

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6AI score0.00205EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/03/30 12:0 a.m.11 views

PT-2026-29032

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view supplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script o...

6.1CVSS6AI score0.0021EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/03/30 12:0 a.m.31 views

CVE-2026-30565

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewsupplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

0.0021EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.14 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the msg parameter i...

6.1CVSS5.6AI score0.00252EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/30 12:0 a.m.18 views

CVE-2026-30559

CVE-2026-30559 affects SourceCodester Sales and Inventory System 1.0. A Reflected Cross-Site Scripting (XSS) vulnerability exists in add_sales.php via the msg parameter, where input is not sanitized, allowing remote attackers to inject arbitrary script/HTML through a crafted URL. The CVSS basis i...

6.1CVSS6AI score0.00266EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2026/03/30 12:0 a.m.19 views

CVE-2026-30566

CVE-2026-30566 is a reflected XSS in SourceCodester Sales and Inventory System 1.0, caused by failure to sanitize the limit parameter in view_customers.php. This allows remote attackers to inject arbitrary script/HTML via a crafted URL. Affected component: view_customers.php (limit parameter); im...

6.1CVSS6AI score0.0021EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2026/03/30 12:0 a.m.27 views

CVE-2026-30560

Affected product: SourceCodester Sales and Inventory System 1.0. The CVE-2026-30560/vulnerability is a Reflected Cross-Site Scripting (XSS) in add_supplier.php via the msg parameter, due to inadequate input sanitization. Consequence: attackers can inject arbitrary web script/HTML through a crafte...

6.1CVSS6AI score0.00252EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2026/03/30 12:0 a.m.20 views

CVE-2026-30561

SourceCodester Sales and Inventory System 1.0 is affected by CVE-2026-30561, a reflected XSS in add_purchase.php via the msg parameter. The input is not sanitized, allowing an attacker to craft a URL that injects arbitrary script or HTML. The vulnerability is typified as NETWORK-accessible with u...

6.1CVSS6AI score0.00252EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/30 12:0 a.m.4 views

CVE-2026-30566

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewcustomers.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script o...

6AI score0.0021EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/30 12:0 a.m.6 views

CVE-2026-30558

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00252EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/30 12:0 a.m.3 views

CVE-2026-30557

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00252EPSS
SaveExploits1References2
Rows per page
Query Builder