Lucene search
K

405 matches found

EUVD
EUVD
added yesterday8 views

EUVD-2026-33408

Shopper: Missing authorization on Product admin Livewire sub-form components...

6.5CVSS5.4AI score0.00029EPSS
Exploits0References3
NVD
NVD
added 5 days ago9 views

CVE-2026-10235

A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of the file /Ingredients-Stock/stockmanager.php. This manipulation of the argument txtsearchcategory causes sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00033EPSS
Exploits0References6
Cvelist
Cvelist
added 5 days ago38 views

CVE-2026-10235 CodeAstro Ingredients Stock Management System stock_manager.php sql injection

A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of the file /Ingredients-Stock/stockmanager.php. This manipulation of the argument txtsearchcategory causes sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00033EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 5 days ago5 views

CVE-2026-10235 CodeAstro Ingredients Stock Management System stock_manager.php sql injection

A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of the file /Ingredients-Stock/stockmanager.php. This manipulation of the argument txtsearchcategory causes sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS5.7AI score0.00033EPSS
Exploits0References6
CVE
CVE
added 5 days ago11 views

CVE-2026-10235

CodeAstro Ingredients Stock Management System 1.0 contains an SQL injection in stock_manager.php via the txt_search_category parameter. The vulnerability affects unknown code in /Ingredients-Stock/stock_manager.php and can be exploited remotely; exploit has been published. No remediation details ...

6.5CVSS6.5AI score0.00033EPSS
Exploits0References6
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-33570

A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of the file /Ingredients-Stock/stockmanager.php. This manipulation of the argument txtsearchcategory causes sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS6.5AI score0.00033EPSS
Exploits0References6
CNNVD
CNNVD
added 5 days ago6 views

CodeAstro Ingredients Stock Management System SQL Injection Vulnerability

The CodeAstro Ingredients Stock Management System is a inventory management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Ingredients Stock Management System has a SQL injection vulnerability. This vulnerability arises from incorrect operations with the parameter txtsearchcatego...

6.5CVSS6.7AI score0.00033EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 5 days ago11 views

PT-2026-45279

A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of the file /Ingredients-Stock/stock manager.php. This manipulation of the argument txt search category causes sql injection. The attack may be initiated remotely. The exploit has...

6.5CVSS6.5AI score0.00033EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/01/09 9:48 a.m.4 views

CVE-2020-24198

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'...

6.1CVSS6.1AI score0.00402EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/13 6:54 p.m.1 views

CVE-2025-14568

A security vulnerability has been detected in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This impacts an unknown function of the file model/User.php. The manipulation of the argument employeeid/id/admin leads to sql injection. The attack can be initiated...

6.5CVSS6.5AI score0.00025EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/13 5:2 p.m.3 views

CVE-2025-14567

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This affects an unknown function of the file /api/employees. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS5.4AI score0.00147EPSS
Exploits1References1
NVD
NVD
added 2025/12/12 7:16 p.m.2 views

CVE-2025-14568

A security vulnerability has been detected in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This impacts an unknown function of the file model/User.php. The manipulation of the argument employeeid/id/admin leads to sql injection. The attack can be initiated...

6.5CVSS0.00025EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/12 6:30 p.m.4 views

EUVD-2025-203098

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This affects an unknown function of the file /api/employees. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has...

6.9CVSS6AI score0.00147EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/12 6:2 p.m.22 views

CVE-2025-14568 haxxorsid Stock-Management-System User.php sql injection

A security vulnerability has been detected in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This impacts an unknown function of the file model/User.php. The manipulation of the argument employeeid/id/admin leads to sql injection. The attack can be initiated...

6.5CVSS0.00025EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/12 6:2 p.m.2 views

CVE-2025-14568 haxxorsid Stock-Management-System User.php sql injection

A security vulnerability has been detected in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This impacts an unknown function of the file model/User.php. The manipulation of the argument employeeid/id/admin leads to sql injection. The attack can be initiated...

6.5CVSS6.5AI score0.00025EPSS
Exploits0References4
OSV
OSV
added 2025/12/12 4:15 p.m.1 views

CVE-2025-14567

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This affects an unknown function of the file /api/employees. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS5.5AI score0.00147EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/12 4:2 p.m.20 views

CVE-2025-14567 haxxorsid Stock-Management-System employees missing authentication

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This affects an unknown function of the file /api/employees. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has...

6.9CVSS0.00147EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/12 4:2 p.m.3 views

CVE-2025-14567 haxxorsid Stock-Management-System employees missing authentication

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This affects an unknown function of the file /api/employees. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has...

6.9CVSS6.2AI score0.00147EPSS
Exploits1References4
CVE
CVE
added 2025/12/12 4:2 p.m.6 views

CVE-2025-14567

CVE-2025-14567 affects haxxorsid Stock-Management-System. Affected component is an authentication-sensitive area in the file /api/employees, where a missing authentication condition allows manipulation with remote reach. The description notes exploitation is possible remotely and that the vendor ...

7.5CVSS6.2AI score0.00147EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.2 views

Stock-Management-System SQL注入漏洞

Stock-Management-System is an inventory management system by Mr Erick Personal Developer. Stock-Management-System version fbbbf213e9c93b87183a3891f77e3cc7095f22b0 has a SQL injection vulnerability that stems from incorrect manipulation of the parameter employeeid/id/admin in the file...

6.5CVSS7AI score0.00025EPSS
Exploits0References4
Rows per page
Query Builder