Lucene search
+L

1054 matches found

OSV
OSV
added 2024/01/11 7:15 p.m.9 views

CVE-2024-0422

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /newitem of the component New Item Creation Page. The manipulation of the argument newitem leads to cross sit...

5.4CVSS3.5AI score0.00497EPSS
SaveExploits1References3
Prion
Prion
added 2024/01/11 7:15 p.m.26 views

Cross site scripting

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /newitem of the component New Item Creation Page. The manipulation of the argument newitem leads to cross sit...

4CVSS6.4AI score0.00497EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/01/11 7:00 p.m.38 views

CVE-2024-0422 CodeAstro POS and Inventory Management System New Item Creation Page new_item cross site scripting

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /newitem of the component New Item Creation Page. The manipulation of the argument newitem leads to cross sit...

4CVSS5.5AI score0.00497EPSS
SaveExploits1References3
CVE
CVE
added 2024/01/11 7:00 p.m.62 views

CVE-2024-0422

CVE-2024-0422 affects CodeAstro POS and Inventory Management System 1.0. The vulnerability lies in the New Item Creation Page, specifically the /new_item functionality, where manipulation of the new_item parameter enables cross-site scripting. Exploitation is remote and the exploit has been discl...

5.4CVSS5.2AI score0.00497EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/11 7:00 p.m.6 views

CVE-2024-0422 CodeAstro POS and Inventory Management System New Item Creation Page new_item cross site scripting

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /newitem of the component New Item Creation Page. The manipulation of the argument newitem leads to cross sit...

4CVSS4.2AI score0.00497EPSS
SaveExploits1References3
NVD
NVD
added 2023/12/13 9:15 p.m.30 views

CVE-2023-6775

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /item/itemcon. The manipulation of the argument itemname leads to cross site scripting. It is possible to initiate the attack remotely. T...

6.1CVSS0.00577EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/13 9:15 p.m.37 views

Cross site scripting

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /item/itemcon. The manipulation of the argument itemname leads to cross site scripting. It is possible to initiate the attack remotely. T...

4CVSS6.4AI score0.00577EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/12/13 8:31 p.m.48 views

CVE-2023-6775

CVE-2023-6775 affects CodeAstro POS and Inventory Management System 1.0. The vulnerability is a Cross-Site Scripting in the unknown part of the file /item/item_con caused by manipulation of the item_name argument. Attacks can be initiated remotely; exploits have been disclosed publicly. Several s...

6.1CVSS4.8AI score0.00577EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/13 8:31 p.m.40 views

CVE-2023-6775 CodeAstro POS and Inventory Management System item_con cross site scripting

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /item/itemcon. The manipulation of the argument itemname leads to cross site scripting. It is possible to initiate the attack remotely. T...

4CVSS6.2AI score0.00577EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/13 8:15 p.m.12 views

CVE-2023-6774

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /accountscon/registeraccount. The manipulation of the argument Username with the input alertdocument.cookie leads to cross...

5.4CVSS3.6AI score0.00679EPSS
SaveExploits1References3
NVD
NVD
added 2023/12/13 8:15 p.m.30 views

CVE-2023-6774

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /accountscon/registeraccount. The manipulation of the argument Username with the input alertdocument.cookie leads to cross...

5.4CVSS0.00679EPSS
SaveExploits1References3
NVD
NVD
added 2023/12/13 8:15 p.m.29 views

CVE-2023-6773

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

8.8CVSS0.0074EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/13 8:15 p.m.27 views

Cross site scripting

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /accountscon/registeraccount. The manipulation of the argument Username with the input alertdocument.cookie leads to cross...

5CVSS6.4AI score0.00679EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/12/13 8:15 p.m.33 views

Improper access control

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

4CVSS7.2AI score0.0074EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/12/13 8:00 p.m.44 views

CVE-2023-6774

CodeAstro POS and Inventory Management System 1.0 contains an XSS vulnerability in /accounts_con/register_account. The Username parameter can be injected with a script tag () to execute arbitrary script in the victim’s browser. Exploitation is possible remotely and the public disclosure of the ex...

5.4CVSS4.6AI score0.00679EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/12/13 7:31 p.m.46 views

CVE-2023-6773

CVE-2023-6773 affects CodeAstro POS and Inventory Management System 1.0, with an access control vulnerability in the User Creation Handler’s unknown function at /accounts_con/register_account. By supplying the value Admin to the parameter account_type , an attacker can trigger improper access con...

8.8CVSS6.6AI score0.0074EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/13 7:31 p.m.44 views

CVE-2023-6773 CodeAstro POS and Inventory Management System User Creation register_account access control

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

4.3CVSS9AI score0.0074EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/12/13 12:00 a.m.11 views

PT-2023-32773 · Unknown · Codeastro Pos/Inventory Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS and Inventory Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown functionality of the file /accounts con/register account. The manipulation of th...

5.4CVSS4.7AI score0.00679EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/12/13 12:00 a.m.10 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in CodeAstro POS and Inventory Management System version 1.0, which stems from the presence of an unknown function in /accountscon/registeraccount that lead...

5.4CVSS6.1AI score0.00679EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/12/13 12:00 a.m.11 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in CodeAstro POS and Inventory Management System version 1.0, which stems from an unknown section in /item/itemcon, leading to cross-site scripting via the...

6.1CVSS6.2AI score0.00577EPSS
SaveExploits1References4
Rows per page
Query Builder