42 matches found
PT-2026-20551
Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.1 Description A Stored Cross-Site Scripting XSS issue exists in InvoicePlane. An authenticated administrator can inject malicious JavaScript through the Invoice Number field. This injected script executes whe...
CVE-2026-25595: Improper Neutralization of Input During Web Page Generation
InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting XSS vulnerability exists in InvoicePlane 1.7.0 via the Invoice Number field. An authenticated administrator can inject malicious JavaScript that executes when any...
InvoicePlane 跨站脚本漏洞
InvoicePlane is an open-source application developed by InvoicePlane. It provides a self-hosted open-source tool for managing your quotes, invoices, customers, and payments. Version 1.7.0 of InvoicePlane contains a cross-site scripting vulnerability. This vulnerability stems from the lack of inpu...
EUVD-2021-26360
Malware in sbrugna...
CVE-2024-42561
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...
CVE-2024-42562
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at preview.php...
CVE-2021-3005
MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information e.g., a CPF number via a modified titulo aka invoice number value to the central/recibo.php URI...
CVE-2024-10136
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manageinvoice.php. The manipulation of the argument invoicenumber leads to sql injection. The attack can be initiated remotely. The...
Pharmacy Management System 安全漏洞
Pharmacy Management System MPMS is a multilingual pharmacy management system by Mayuri K. Individual developer. A security vulnerability exists in Pharmacy Management System version 1.0, which originates from an SQL injection vulnerability contained in the invoicenumber parameter of the...
CVE-2024-42562
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at preview.php...
CVE-2024-42561
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...
CVE-2024-42561
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...
CVE-2024-42561
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...
pharmacy-manage-system 安全漏洞
pharmacy-manage-system is a pharmacy management system by Krishna Aryal, an individual developer. A security vulnerability exists in pharmacy-manage-system, which stems from an SQL injection vulnerability in the invoicenumber parameter of the salesreport.php page...
PT-2024-30022 · Unknown · Pharmacy Management System
Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version a2efc8 Description: The issue is a SQL injection vulnerability. It can be exploited via the invoice number parameter at the "preview.php" endpoint. Recommendations: For version a2efc8, consider restricting...
PT-2024-30021 · Unknown · Pharmacy Management System
Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version a2efc8 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the invoice number parameter at the "sales report.php" endpoint. Recommendations: For versio...
CVE-2024-42562
The Pharmacy Management System (specifically commit a2efc8 ) is vulnerable to a SQL injection vulnerability. This flaw exists due to improper neutralization of special elements in an SQL command, triggered via the invoice_number parameter at the preview.php endpoint. Exploitation of this vulnerab...
pharmacy-manage-system 安全漏洞
pharmacy-manage-system is a pharmacy management system by Krishna Aryal, an individual developer. A security vulnerability exists in pharmacy-manage-system due to an SQL injection vulnerability in the invoicenumber parameter of the preview.php page...
