CVE-2024-23864

CVE-2024-23864 concerns Cups Easy (Purchase & Inventory) version 1.0, where the vulnerable component is the description parameter processed by the endpoint "/cupseasylive/countrylist.php". The root cause is insufficient encoding/escaping of user-controlled input, enabling a Cross-Site Scripting (...

CVE-2024-23863

CVE-2024-23863 affects Cups Easy (Purchase & Inventory) v1.0. The vulnerability is an XSS flaw in the description parameter of /cupseasylive/taxstructuredisplay.php, caused by insufficient encoding of user-controlled inputs. An attacker could lure an authenticated user to a crafted URL, potential...

CVE-2024-23863 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxstructuredisplay.php, in the description parameter. Exploitation of this...

CVE-2024-23862

CVE-2024-23862 affects Cups Easy (Purchase & Inventory) v1.0. The issue is a Cross-Site Scripting (XSS) flaw in the grnno parameter of /cupseasylive/grndisplay.php caused by insufficient encoding of user-supplied input. Exploitation could allow a remote attacker to deliver a crafted URL to an aut...

CVE-2024-23861

Cups Easy (Purchase & Inventory) 1.0 is vulnerable to a Cross‑Site Scripting (XSS) flaw in the endpoint /cupseasylive/unitofmeasurementcreate.php , via the unitofmeasurementid parameter. The issue arises from insufficient encoding of user‑controlled input, enabling an attacker to lure an authenti...

CVE-2024-23859

CVE-2024-23859 affects Cups Easy (Purchase & Inventory) v1.0. The XSS flaw arises from insufficient encoding in the flatamount parameter of /cupseasylive/taxstructurelinecreate.php. A remote attacker could lure an authenticated user to a crafted URL and potentially steal session cookies (impactin...

CVE-2024-23859 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxstructurelinecreate.php, in the flatamount parameter. Exploitation of this...

CVE-2024-23858 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stockissuancelinecreate.php, in the batchno parameter. Exploitation of this...

CVE-2024-23858

CVE-2024-23858 concerns Cups Easy (Purchase & Inventory) v1.0, where the batchno parameter in the /cupseasylive/stockissuancelinecreate.php endpoint is not sufficiently encoded, enabling a Cross-Site Scripting (XSS) vulnerability. The flaw could allow a remote attacker to lure an authenticated us...

CVE-2024-23857 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/grnlinecreate.php, in the batchno parameter. Exploitation of this vulnerability...

CVE-2024-23857

CVE-2024-23857 affects Cups Easy (Purchase & Inventory) v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the batchno parameter of /cupseasylive/grnlinecreate.php caused by insufficient encoding of user-controlled input. Exploitation could allow a remote attacker to lure an authenti...

CVE-2024-23856 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemlist.php, in the description parameter. Exploitation of this vulnerability cou...

CVE-2024-23856

CVE-2024-23856 affects Cups Easy (Purchase & Inventory) v1.0, where the description parameter on /cupseasylive/itemlist.php can be exploited through insufficient encoding of user input to trigger a Cross-Site Scripting (XSS) condition. The issue could allow an attacker, via a specially crafted UR...

CVE-2024-23880: Improper Neutralization of Input During Web Page Generation

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxcodelist.php, in the description parameter. Exploitation of this vulnerability...

CVE-2024-23875: Improper Neutralization of Input During Web Page Generation

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stockissuancedisplay.php, in the issuanceno parameter. Exploitation of this...

CVE-2024-23872: Improper Neutralization of Input During Web Page Generation

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/locationmodify.php, in the description parameter. Exploitation of this vulnerabili...

CVE-2024-23873: Improper Neutralization of Input During Web Page Generation

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/currencymodify.php, in the currencyid parameter. Exploitation of this vulnerabilit...

CVE-2024-23882: Improper Neutralization of Input During Web Page Generation

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxcodecreate.php, in the taxcodeid parameter. Exploitation of this vulnerability...

CVE-2024-23877: Improper Neutralization of Input During Web Page Generation

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/currencycreate.php, in the currencyid parameter. Exploitation of this vulnerabilit...

CVE-2024-23871: Improper Neutralization of Input During Web Page Generation

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/unitofmeasurementmodify.php, in the description parameter. Exploitation of this...