Lucene search
+L

42 matches found

CNNVD
CNNVD
•added 2026/02/18 12:00 a.m.•22 views

InvoicePlane 跨站脚本漏洞

InvoicePlane is an open-source application developed by InvoicePlane. It provides a self-hosted open-source tool for managing your quotes, invoices, customers, and payments. Version 1.7.0 of InvoicePlane contains a cross-site scripting vulnerability, which stems from improper handling of the...

4.8CVSS5.7AI score0.0027EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•1 views

CVE-2026-25595: Improper Neutralization of Input During Web Page Generation

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting XSS vulnerability exists in InvoicePlane 1.7.0 via the Invoice Number field. An authenticated administrator can inject malicious JavaScript that executes when any...

4.8CVSS5.7AI score0.0027EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2026/02/18 12:00 a.m.•20 views

InvoicePlane 跨站脚本漏洞

InvoicePlane is an open-source application developed by InvoicePlane. It provides a self-hosted open-source tool for managing your quotes, invoices, customers, and payments. Version 1.7.0 of InvoicePlane contains a cross-site scripting vulnerability. This vulnerability stems from the lack of inpu...

7.5CVSS5.6AI score0.00228EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-26360

Malware in sbrugna...

4.3CVSS5.6AI score0.00867EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 10:29 a.m.•11 views

CVE-2024-42561

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...

8.8CVSS8.3AI score0.09039EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:25 a.m.•14 views

CVE-2024-42562

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at preview.php...

9.8CVSS8.3AI score0.00587EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:38 p.m.•20 views

CVE-2021-3005

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information e.g., a CPF number via a modified titulo aka invoice number value to the central/recibo.php URI...

4.3CVSS6.5AI score0.00867EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/19 12:15 p.m.•17 views

CVE-2024-10136

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manageinvoice.php. The manipulation of the argument invoicenumber leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.8AI score0.00544EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/10/19 12:00 a.m.•13 views

Pharmacy Management System 安全漏洞

Pharmacy Management System MPMS is a multilingual pharmacy management system by Mayuri K. Individual developer. A security vulnerability exists in Pharmacy Management System version 1.0, which originates from an SQL injection vulnerability contained in the invoicenumber parameter of the...

9.8CVSS7AI score0.00544EPSS
SaveExploits1References6
OSV
OSV
•added 2024/08/20 1:15 p.m.•19 views

CVE-2024-42562

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at preview.php...

9.8CVSS5.8AI score0.00587EPSS
SaveExploits1References1
OSV
OSV
•added 2024/08/20 1:15 p.m.•13 views

CVE-2024-42561

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...

8.8CVSS5.8AI score0.09039EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/08/20 12:00 a.m.•29 views

CVE-2024-42561

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...

0.09039EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/08/20 12:00 a.m.•11 views

CVE-2024-42561

Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...

8.5AI score0.09039EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/20 12:00 a.m.•10 views

pharmacy-manage-system 安全漏洞

pharmacy-manage-system is a pharmacy management system by Krishna Aryal, an individual developer. A security vulnerability exists in pharmacy-manage-system, which stems from an SQL injection vulnerability in the invoicenumber parameter of the salesreport.php page...

8.8CVSS7.9AI score0.09039EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/08/20 12:00 a.m.•20 views

PT-2024-30022 · Unknown · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version a2efc8 Description: The issue is a SQL injection vulnerability. It can be exploited via the invoice number parameter at the "preview.php" endpoint. Recommendations: For version a2efc8, consider restricting...

9.8CVSS8.2AI score0.00587EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/08/20 12:00 a.m.•12 views

PT-2024-30021 · Unknown · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version a2efc8 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the invoice number parameter at the "sales report.php" endpoint. Recommendations: For versio...

8.8CVSS8.1AI score0.09039EPSS
SaveExploits1References5
CVE
CVE
•added 2024/08/20 12:00 a.m.•71 views

CVE-2024-42562

The Pharmacy Management System (specifically commit a2efc8 ) is vulnerable to a SQL injection vulnerability. This flaw exists due to improper neutralization of special elements in an SQL command, triggered via the invoice_number parameter at the preview.php endpoint. Exploitation of this vulnerab...

9.8CVSS8.3AI score0.00587EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/08/20 12:00 a.m.•16 views

pharmacy-manage-system 安全漏洞

pharmacy-manage-system is a pharmacy management system by Krishna Aryal, an individual developer. A security vulnerability exists in pharmacy-manage-system due to an SQL injection vulnerability in the invoicenumber parameter of the preview.php page...

9.8CVSS7.9AI score0.00587EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/09/18 12:15 p.m.•9 views

CVE-2023-42253

Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting XSS in Add Accounts via Invoice No, To, and Mammul...

6.1CVSS5.8AI score0.00434EPSS
SaveExploits1References3
OSV
OSV
•added 2023/09/18 12:15 p.m.•13 views

CVE-2023-42253

Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting XSS in Add Accounts via Invoice No, To, and Mammul...

6.1CVSS5.8AI score0.00434EPSS
SaveExploits1References2
Rows per page
Query Builder