CVE-2026-100904

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

EUVD-2026-88071

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

CVE-2026-100904

The amirsanni mini-inventory-and-sales-management-system is vulnerable to a cross-site scripting (XSS) flaw within the Items Management Module . Specifically, an unknown function in the file application/controllers/Items.php fails to properly handle the itemName argument, allowing for remote expl...

CVE-2026-100904 amirsanni mini-inventory-and-sales-management-system Items Management Items.php cross site scripting

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

CVE-2026-100904 amirsanni mini-inventory-and-sales-management-system Items Management Items.php cross site scripting

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

PT-2026-99760

Name of the Vulnerable Software and Affected Versions amirsanni mini-inventory-and-sales-management-system versions up to 81bf0b55f5933f3b0dbb1583204a612e06605b95 Description A cross site scripting issue exists within the Items Management Module in the file application/controllers/Items.php. Remo...

CVE-2026-100904: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

PT-2026-73061

Name of the Vulnerable Software and Affected Versions code-projects Online Food Order System version 1.0 Description An issue exists in the edit food items.php file where manipulating the dname argument allows for cross-site scripting XSS, a technique used to inject malicious scripts into web pag...

CVE-2026-8802

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This issue affects the function getPicThumb of the file app/Controllers/Items.php. The manipulation of the argument picfilename results in path traversal. The attack may be launched remotely. The patch is...

CVE-2026-8802: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This issue affects the function getPicThumb of the file app/Controllers/Items.php. The manipulation of the argument picfilename results in path traversal. The attack may be launched remotely. The patch is...

PT-2024-29442

Name of the Vulnerable Software and Affected Versions CampCodes Supplier Management System version 1.0 Description The issue concerns SQL injection. It can be exploited via the "Supply Management System/admin/view invoice items.php?id=" API endpoint, specifically through the id variable...

argentavis.org XSS vulnerability

Open Bug Bounty ID: OBB-361204 Description| Value ---|--- Affected Website:| argentavis.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

voetbalkrant.com XSS vulnerability

Vulnerable URL: https://www.voetbalkrant.com/soccer/news/ajax-get-items.php?jsoncallback=prompt/OPENBUGBOUNTY/...

walfoot.be XSS vulnerability

Vulnerable URL: https://www.walfoot.be/soccer/news/ajax-get-items.php?jsoncallback=prompt/OPENBUGBOUNTY/...

CVE-2014-3774

Multiple cross-site scripting XSS vulnerabilities in items.php in TeamPass before 2.1.20 allow remote attackers to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a 1 hidcat or 2 openfolder form element, or 3 id parameter, which is not properly handle...

CVE-2014-3774: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in items.php in TeamPass before 2.1.20 allow remote attackers to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a 1 hidcat or 2 openfolder form element, or 3 id parameter, which is not properly handle...

PT-2014-5491

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.20 Description The issue allows remote attackers to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a 1 hid cat or 2 open folder form element, or 3 id parameter, whic...

Funnel Web (items.php?&cat_id) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Funnel Web items.php?&catid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.funnel-web.com.au/ Persian Gulf 4 Ever! Dork : "Web site design by Funnel Web" "inurl:items.ph...

PT-2010-5574

Name of the Vulnerable Software and Affected Versions Habari version 0.6.5 Description The issue allows remote attackers to obtain sensitive information via a direct request to 1 "header.php" and 2 "comments items.php" in system/admin/, which reveals the installation path in an error message...

CVE-2009-0832: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter...