2698 matches found
CVE-2024-42561
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...
CVE-2024-42561
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...
CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...
CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...
pharmacy-manage-system 安全漏洞
pharmacy-manage-system is a pharmacy management system by Krishna Aryal, an individual developer. A security vulnerability exists in pharmacy-manage-system, which stems from an SQL injection vulnerability in the invoicenumber parameter of the salesreport.php page...
CVE-2024-42561
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...
CVE-2024-42561
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoicenumber parameter at salesreport.php...
PT-2024-30021 · Unknown · Pharmacy Management System
Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version a2efc8 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the invoice number parameter at the "sales report.php" endpoint. Recommendations: For versio...
CVE-2024-39405 Adobe Commerce | Improper Authorization (CWE-285)
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information...
orionairsales.co.uk Cross Site Scripting vulnerability OBB-3949384
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
skookautosales.com Cross Site Scripting vulnerability OBB-3943930
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2024-2980 Malicious code in sales-trends (npm)
False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...
Eventbrite Promoted Illegal Opioid Sales to People Searching for Addiction Recovery Help
A WIRED investigation found thousands of Eventbrite posts selling escort services and drugs like Xanax and oxycodone—some of which the company’s algorithm recommended alongside addiction recovery events...
File Upload Vulnerability in UFIDA U8+CRM at UFIDA Network Technology Co.
UFIDA U8+CRM is a management software designed specifically for the agency sales and service industry that integrates CRM, call center, and OA core applications and provides integrated applications for front-end marketing, back-end business processing, and employee management. A file upload...
Car Dealer < 4.16 - Admin+ Content Injection
Description The Car Dealer Dealership and Vehicle sales plugin for WordPress is vulnerable to unauthorized content injection due to insufficient input validation in all versions up to, and including, 4.15. This makes it possible for authenticated attackers, with administrator-level access and...
CVE-2024-1688
CVE-2024-1688 affects the Woo Total Sales plugin for WordPress. The vulnerability is due to a missing capability check in get_orders_archive(), allowing unauthenticated attackers to retrieve sales reports. Impact: information exposure of store sales data across all versions up to and including 3....
PT-2024-18224 · WordPress · Woo Total Sales
Name of the Vulnerable Software and Affected Versions: Woo Total Sales plugin for WordPress versions up to, and including, 3.1.4 Description: The issue is related to unauthorized access of data due to a missing capability check on the get orders archive function. This allows unauthenticated...
WordPress plugin Woo Total Sales 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Woo Total Sales plugin <= 3.1.4 - Missing Authorization to Unauthenticated Sales Report Retrieval vulnerability
Missing Authorization to Unauthenticated Sales Report Retrieval vulnerability discovered by Lucio Sá in WordPress Plugin Woo Total Sales versions = 3.1.4...
