CVE-2022-36686

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockin&month=...

Sql injection

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockin&month=...

Sql injection

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockout&month=...

Sql injection

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser&id=...

Arbitrary file deletion

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

Sql injection

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/waste&month=...

CVE-2022-36690

CVE-2022-36690 affects Ingredients Stock Management System v1.0 with a SQL injection in the id parameter of /admin/?page=user/manage_user&id= (input validation missing in that endpoint). The vulnerability is documented across multiple sources (CNVD/CNNVD/NVD) and Red Hat PRION/CVE records, descri...

CVE-2022-36689

CVE-2022-36689 affects Ingredients Stock Management System v1.0. The vulnerability is a SQL injection in the month parameter of the endpoint /admin/?page=reports/waste&month=. Root cause: lack of input validation in the month parameter, enabling attackers to execute arbitrary SQL commands. Docume...

CVE-2022-36689

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/waste&month=...

CVE-2022-36687

The CVE-2022-36687 entry concerns Ingredients Stock Management System v1.0 with an arbitrary file deletion vulnerability in the component /classes/Master.php?f=delete_img. The root cause is lack of validation for the delete file path, enabling arbitrary file deletion. Documented impacts include h...

CVE-2022-36688

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockout&month=...

CVE-2022-36688

CVE-2022-36688 affects Ingredients Stock Management System v1.0. The vulnerability is a SQL injection in the month parameter of /admin/?page=reports/stockout&month=, caused by insufficient input validation. Base CVSS v3.1 is 8.8 (HIGH) with impacts on confidentiality, integrity, and availability....

CVE-2022-36687

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

CVE-2022-36686

Ingredients Stock Management System v1.0 contains a SQL injection via the month parameter at /admin/?page=reports/stockin&month=, caused by insufficient validation of external input in the month parameter. This vulnerability is documented as CVE-2022-36686 with a CVSS v3.1 base score of 8.8 (HIGH...

CVE-2022-36686

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockin&month=...

PT-2022-23553 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the month parameter at the "/admin/?page=reports/stockin&month=" endpoint...

PT-2022-23556 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the month parameter at the "/admin/?page=reports/waste&month=" endpoint...

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /admin/?page= reports/stockout&month= is missing validation of external...

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the lack of validation of the month parameter at /admin/?page= The...

PT-2022-23554 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue allows for arbitrary file deletion via the /classes/Master.php component, specifically through the f parameter set to delete img. Recommendations: For Ingredients Stock...