Lucene search
+L

509 matches found

Positive Technologies
Positive Technologies
•added 2022/05/13 12:00 a.m.•3 views

PT-2022-20101

Name of the Vulnerable Software and Affected Versions Pharmacy Sales And Inventory System version 1.0 Description The issue allows for SQL Injection via the /pharmacy-sales-and-inventory-system/manage user.php API endpoint, specifically through the id variable. This could potentially lead to...

9.8CVSS0.01096EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/13 12:00 a.m.•7 views

CVE-2022-30407: Improper Neutralization of Special Elements used in an SQL Command

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

9.8CVSS8.3AI score0.01096EPSS
SaveExploits1References2
Prion
Prion
•added 2021/07/22 6:15 p.m.•25 views

Sql injection

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

7.5CVSS9.8AI score0.01517EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/07/22 5:10 p.m.•39 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

10AI score0.01517EPSS
SaveExploits1References1
CVE
CVE
•added 2021/07/22 5:10 p.m.•69 views

CVE-2021-25202

CVE-2021-25202 describes a SQL injection vulnerability in the SourceCodester Sales and Inventory System v1.0. The flaw allows remote attackers to execute arbitrary SQL statements through the id parameter in the path \ahira\admin\inventory.php. The condition enables potential disclosure or modific...

9.8CVSS9.9AI score0.01517EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/07/22 12:00 a.m.•4 views

PT-2021-16454

Name of the Vulnerable Software and Affected Versions: SourceCodester Sales and Inventory System version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the id parameter to the "/ahira/admin/inventory.php" API endpoint. Recommendations:...

9.8CVSS0.01517EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/22 12:00 a.m.•12 views

CVE-2021-25202: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

9.8CVSS6.4AI score0.01517EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/17 12:00 a.m.•6 views

CVE-2020-28133: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in salesinventory/login.php...

9.8CVSS5.8AI score0.02107EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/11/17 12:00 a.m.•7 views

PT-2020-16931

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Grocery Store Sales And Inventory System version 1.0 Description An issue was discovered in the web login functionality, allowing authentication bypass. This enables an attacker to gain client privileges via SQL injection...

9.8CVSS0.02107EPSS
SaveExploits1References7
Rows per page
Query Builder