CVE-2022-4090

A vulnerability was found in rickxy Stock Management System and classified as problematic. This issue affects some unknown processing of the file ustransac.php?action=add. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to...

Cross site request forgery (csrf)

A vulnerability was found in rickxy Stock Management System and classified as problematic. This issue affects some unknown processing of the file ustransac.php?action=add. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2022-4088

A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2022-4089

A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability affects unknown code of the file /pages/processlogin.php. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has...

Sql injection

A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit...

Cross site scripting

A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability affects unknown code of the file /pages/processlogin.php. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has...

CVE-2022-4090

CVE-2022-4090: Cross-site request forgery in the rickxy Stock Management System affecting processing of us_transac.php?action=add. The issue allows remote initiation and exploitation, with public disclosure noted across multiple sources. Root cause is described as manipulation leading to CSRF; af...

Stock Management System 跨站脚本漏洞

Sourcecodester Stock Management System is an inventory management system. A security vulnerability exists in Stock Management System. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2022-4090 rickxy Stock Management System cross-site request forgery

A vulnerability was found in rickxy Stock Management System and classified as problematic. This issue affects some unknown processing of the file ustransac.php?action=add. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2022-4089

The CVE-2022-4089 entry concerns the Rickxy Stock Management System. Affected component: the login processing page /pages/processlogin.php. Root cause: manipulation of the user argument enables cross-site scripting. Impact: results in client-side script execution, with exploitation possible remot...

Stock Management System SQL注入漏洞

Sourcecodester Stock Management System is an inventory management system. A security vulnerability exists in Stock Management System, which is caused by an incorrect manipulation of the parameter user/password leading to sql injection...

CVE-2022-4089 rickxy Stock Management System processlogin.php cross site scripting

A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability affects unknown code of the file /pages/processlogin.php. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has...

CVE-2022-4089 rickxy Stock Management System processlogin.php cross site scripting

A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability affects unknown code of the file /pages/processlogin.php. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has...

CVE-2022-4088

CVE-2022-4088 affects rickxy Stock Management System. The vulnerability is in /pages/processlogin.php where manipulating the user/password arguments leads to SQL injection. The issue is exploitable remotely and the exploit has been disclosed. There is no explicit patch in the provided documents; ...

CVE-2022-4088 rickxy Stock Management System processlogin.php sql injection

A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit...

Stock Management System 跨站请求伪造漏洞

Sourcecodester Stock Management System is an inventory management system. A security vulnerability exists in Stock Management System. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...

Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11173)

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the lack of validation of the month parameter at /admin/?page= The...

Ingredients Stock Management System Arbitrary File Deletion Vulnerability

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of Ingredients Stock Management System is vulnerable to an arbitrary file deletion vulnerability in component /classes/ Master.php?f=deleteimg lacks validation for the delete...

Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11175)

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the month parameter of...

Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11174)

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /admin/?page= reports/stockout&month= is missing validation of external...