Lucene search
+L

425 matches found

CNNVD
CNNVD
added 2022/08/25 12:00 a.m.8 views

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. .php?f=deletestockin location has a SQL injection issue with the id parameter. No detailed vulnerability details are available at this time...

9.8CVSS8AI score0.01033EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/25 12:00 a.m.8 views

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system by Carlo Montero. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /items/manage The SQL injection issue exists in the id parameter of the item.php location. No...

8.8CVSS7.9AI score0.00925EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/25 12:00 a.m.12 views

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. A SQL injection issue exists in the id parameter of the /stocks/manage stockin.php location. No detailed vulnerability details are available at this time...

8.8CVSS7.9AI score0.00925EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/07/07 12:00 a.m.49 views

Stock Management System SQL Injection Vulnerability (CNVD-2022-53256)

Stock Management System is an inventory management system. A SQL injection vulnerability exists in Stock Management System v1.0, which originates from a lack of validation of the id parameter in /isms/admin/stocks/viewstock.php against an externally entered SQL statement. An attacker can exploit...

9.8CVSS9.9AI score0.0149EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/05 8:15 p.m.4 views

CVE-2022-32311

Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/viewstock.php...

9.8CVSS5.7AI score0.0149EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/05 8:15 p.m.26 views

CVE-2022-32311

Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/viewstock.php...

9.8CVSS5.8AI score0.0149EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/05 8:15 p.m.25 views

CVE-2022-32311

Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/viewstock.php...

9.8CVSS0.0149EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/05 8:15 p.m.24 views

CVE-2022-32310

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php...

9.8CVSS0.01611EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/05 8:15 p.m.5 views

CVE-2022-32310

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php...

9.8CVSS5.4AI score0.01611EPSS
SaveExploits1References2
Prion
Prion
added 2022/07/05 8:15 p.m.21 views

Sql injection

Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/viewstock.php...

7.5CVSS9.7AI score0.0149EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/07/05 7:27 p.m.37 views

CVE-2022-32311

Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/viewstock.php...

10AI score0.0149EPSS
SaveExploits1References1
CVE
CVE
added 2022/07/05 7:27 p.m.73 views

CVE-2022-32311

CVE-2022-32311 affects Ingredient Stock Management System v1.0, with a SQL injection vulnerability in the id parameter of /isms/admin/stocks/view_stock.php. Root cause: lack of input validation allowing SQL commands to be injected. Impact: potential data disclosure/integrity/availability compromi...

9.8CVSS9.8AI score0.0149EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/07/05 7:27 p.m.80 views

CVE-2022-32310

CVE-2022-32310 affects Ingredient Stock Management System v1.0. The issue is an access-control flaw in the Users.php endpoint that lets an unauthenticated attacker obtain or take over user accounts via a crafted POST request. Impact per sources indicates account takeover with no required user int...

9.8CVSS9.1AI score0.01611EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/07/05 12:00 a.m.13 views

Stock Management System SQL注入漏洞

Stock Management System is an inventory management system. A SQL injection vulnerability exists in Stock Management System v1.0, which originates from a lack of validation of the id parameter in /isms/admin/stocks/viewstock.php against an externally entered SQL statement. An attacker can exploit...

9.8CVSS6.1AI score0.0149EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/05 12:00 a.m.11 views

Stock Management System 命令注入漏洞

Sourcecodester Stock Management System is an inventory management system. A security vulnerability exists in the Stock Management System v1.0 version that originates from a susceptibility to takeover by an unauthenticated account...

9.8CVSS8.3AI score0.01611EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/07/05 12:00 a.m.16 views

PT-2022-21222 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredient Stock Management System version 1.0 Description: An access control issue allows attackers to take over user accounts via a crafted POST request to "/isms/classes/Users.php". Recommendations: For Ingredient Stock Management System...

9.8CVSS9.1AI score0.01611EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/31 6:15 p.m.10 views

CVE-2021-44114

Cross Site Scripting XSS vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function...

4.8CVSS6.5AI score0.00996EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/31 6:15 p.m.36 views

CVE-2021-44114

Cross Site Scripting XSS vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function...

4.8CVSS0.00996EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/31 6:15 p.m.10 views

CVE-2021-44114

Cross Site Scripting XSS vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function...

4.8CVSS6.6AI score0.00996EPSS
SaveExploits0References4
Prion
Prion
added 2022/01/31 6:15 p.m.28 views

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function...

3.5CVSS5.6AI score0.00996EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder