Lucene search
+L

263 matches found

Positive Technologies
Positive Technologies
•added 2022/11/07 12:00 a.m.•19 views

PT-2022-24565 · Maxon · Maxon Erp

Name of the Vulnerable Software and Affected Versions: Maxon ERP affected versions not specified Description: A critical vulnerability has been found in Maxon ERP, affecting the file /index.php/purchase order/browse data. The manipulation of the tb search argument leads to SQL injection. It is...

9.8CVSS9.7AI score0.00718EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2022/10/14 11:15 a.m.•16 views

CVE-2022-3503

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

5.4CVSS3.8AI score0.00578EPSS
SaveExploits1References2
NVD
NVD
•added 2022/10/14 11:15 a.m.•33 views

CVE-2022-3503

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

5.4CVSS0.00578EPSS
SaveExploits1References2
Prion
Prion
•added 2022/10/14 11:15 a.m.•26 views

Cross site scripting

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

4.9CVSS5.4AI score0.00578EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/10/14 12:00 a.m.•19 views

Purchase Order Management System security vulnerabilities

Purchase Order Management System is a purchase order management system developed by Carlo Montero. A security vulnerability exists in Purchase Order Management System version 1.0, which is a cross-site scripting vulnerability caused by incorrect manipulation of the parameter "Name/Address/Contact...

5.4CVSS5.3AI score0.00578EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/10/14 12:00 a.m.•25 views

PT-2022-22509 · Sourcecodester · Sourcecodester Purchase Order Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Purchase Order Management System version 1.0 Description: A vulnerability was found in the Supplier Handler component, where the manipulation of the Supplier Name, Address, Contact person, or Contact argument leads to cross-sit...

5.4CVSS5.2AI score0.00578EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/10/14 12:00 a.m.•17 views

Purchase Order Management System Cross-site Scripting Vulnerability

Purchase Order Management System is a purchase order management system developed by Carlo Montero. A security vulnerability exists in Purchase Order Management System version 1.0, which is a cross-site scripting vulnerability caused by manipulation of the parameter "page"...

5.4CVSS5.3AI score0.00589EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/10/14 12:00 a.m.•45 views

CVE-2022-3503 SourceCodester Purchase Order Management System Supplier cross site scripting

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

3.5CVSS5.5AI score0.00578EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/14 12:00 a.m.•10 views

CVE-2022-3503: Improper Neutralization

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

5.4CVSS4AI score0.00578EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/10/14 12:00 a.m.•18 views

Purchase Order Management System SQL Injection Vulnerability

Purchase Order Management System is a purchase order management system by Carlo Montero, an individual developer. A security vulnerability exists in Purchase Order Management System version 1.0, which is caused by a sql injection due to manipulation of the parameter id...

9.8CVSS8.3AI score0.00756EPSS
SaveExploits1References3
CVE
CVE
•added 2022/10/14 12:00 a.m.•80 views

CVE-2022-3503

CVE-2022-3503 affects SourceCodester Purchase Order Management System 1.0, specifically the Supplier Handler component. The vulnerability is a cross-site scripting (XSS) flaw caused by manipulating the arguments Supplier Name/Address/Contact person/Contact, which can be exploited remotely. The ex...

5.4CVSS4AI score0.00578EPSS
SaveExploits1References2Affected Software1
Hacker One
Hacker One
•added 2022/05/07 4:46 p.m.•59 views

Glovo: Integer overflow vulnerability

Summary: In one of my previous reports i send parameter tampering report vulnerability. Then you asked me to send PoC and you just closed it, that's why i'm sending you this new report with exactly name of vulnerability. Integer Overflows are closely related to other conditions that occur when...

7.3AI score
SaveExploits0
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•28 views

Purchase Order Management System SQL注入漏洞(CNVD-2022-44236)

Purchase Order Management System is a purchase order management system. Purchase Order Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS4.8AI score0.02621EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•26 views

Purchase Order Management System SQL注入漏洞

Purchase Order Management System is a purchase order management system. Purchase Order Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS4.8AI score0.02621EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/21 8:15 p.m.•9 views

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

9.8CVSS7.3AI score0.02621EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/04/21 8:15 p.m.•16 views

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

9.8CVSS7.3AI score0.02621EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/21 8:15 p.m.•8 views

CVE-2022-28021

Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...

9.8CVSS7.8AI score0.24256EPSS
SaveExploits1References2
NVD
NVD
•added 2022/04/21 8:15 p.m.•25 views

CVE-2022-28022

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...

9.8CVSS0.02621EPSS
SaveExploits1References1
NVD
NVD
•added 2022/04/21 8:15 p.m.•28 views

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...

9.8CVSS0.02621EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/04/21 8:15 p.m.•15 views

CVE-2022-28021

Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...

9.8CVSS6.3AI score0.24256EPSS
SaveExploits1References1
Rows per page
Query Builder