CVE-2020-24197

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter...

CVE-2020-24197

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter...

Sql injection

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter...

CVE-2020-24198

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'...

CVE-2020-24198

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'...

CVE-2020-24198

A persistent cross-site scripting vulnerability affects Sourcecodester Stock Management System v1.0 (Stock Management System). The issue is exploitable via the Brand Name field, allowing remote attackers to inject arbitrary web script or HTML. Root cause is improper input handling/sanitization fo...

CVE-2020-24197

CVE-2020-24197 describes a SQL injection in the login component of Stock Management System v1.0, exploitable via the username parameter to execute arbitrary SQL commands. The vulnerability is described as remote with high impact (C: High, I: High, A: High in CVSS 3.1), and affected context is the...

CVE-2020-24197

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter...

PT-2020-15652 · Sourcecodester · Sourcecodester Stock Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Stock Management System version 1.0 Description: A persistent cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the Brand Name. This enables attackers to potentially execute malicious...

PT-2020-15651

Name of the Vulnerable Software and Affected Versions Stock Management System version 1.0 Description A SQL injection issue in the login component allows a remote attacker to execute arbitrary SQL commands via the username parameter. Recommendations For Stock Management System version 1.0, avoid...

CVE-2020-24198: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'...

CVE-2020-24197: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter...

CVE-2020-23830

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

CVE-2020-23830

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

CVE-2020-23830

CVE-2020-23830 documents a CSRF in the SourceCodester Stock Management System v1.0, specifically in changeUsername.php. An attacker can cause an authenticated user to have their username changed when the victim visits a third-party site, effectively denying future logins. The provided sources do ...

PT-2020-15588

Name of the Vulnerable Software and Affected Versions SourceCodester Stock Management System version 1.0 Description A Cross-Site Request Forgery issue in the changeUsername.php file allows remote attackers to change an authenticated victim's username when they visit a third-party site, potential...

CVE-2020-23830: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site...

Stock Management System 1.0 - Cross-Site Request Forgery (Change Username)

Exploit Title: Stock Management System 1.0 - Cross-Site Request Forgery Change Username Exploit Author: Bobby Cooke & Adeeb Shah @hyd3sec CVE ID: N/A Date: 2020-09-01 Vendor Homepage: https://www.sourcecodester.com/php/14366/stock-management-system-php.html Software Link:...

CVE-2020-23831

A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials...

CVE-2020-23831

A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials...