820 matches found
Warehouse Management System 跨站脚本漏洞
Warehouse Management System is a warehouse management system developed by Carlo Montero. A cross-site scripting vulnerability exists in Warehouse Management System version 1.0, which stems from the parameter adminuser/adminnama/adminalamat/admintelepon in the file pengguna.php, which can lead to...
Warehouse Management System 跨站脚本漏洞
Warehouse Management System is a warehouse management system developed by Carlo Montero. A cross-site scripting vulnerability exists in Warehouse Management System version 1.0, which stems from the parameter namacustomer/alamatcustomer/notelpcustomer in the file customer.php and results in...
CVE-2024-3612 SourceCodester Warehouse Management System barang.php cross site scripting
A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument namabarang/merek leads to cross site scripting. The attack can be...
CVE-2024-3612
CVE-2024-3612 affects SourceCodester Warehouse Management System 1.0, specifically the barang.php file. The vulnerability is a cross-site scripting (XSS) flaw caused by manipulation of the nama_barang/merek parameter, enabling remote exploitation. Documents consistently describe it as an external...
CVE-2024-3612 SourceCodester Warehouse Management System barang.php cross site scripting
A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument namabarang/merek leads to cross site scripting. The attack can be...
PT-2024-26918 · Sourcecodester · Sourcecodester Warehouse Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Warehouse Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Warehouse Management System, affecting the file pengguna.php. The manipulation of the arguments admin user, admin...
PT-2024-26914 · Sourcecodester · Sourcecodester Warehouse Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Warehouse Management System version 1.0 Description: A problematic issue was found in the SourceCodester Warehouse Management System, affecting some unknown functionality of the file supplier.php. The manipulation of the...
Warehouse Management System 跨站脚本漏洞
Warehouse Management System is a Warehouse Management System by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Warehouse Management System version 1.0, which is caused by an unknown function in supplier.php, via the...
Warehouse Management System 跨站脚本漏洞
Warehouse Management System is a Warehouse Management System developed by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Warehouse Management System version 1.0, which originates from an unknown function in barang.php that leads to cross-site...
Friday Squid Blogging: SqUID Bots
Theyre AI warehouse robots. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...
GHSA-MRJ3-F2H4-7W45 Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method
Summary Using Pickup: Local stock only as a click-and-collect points could cause a leak of customer addresses Details When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes it...
CVE-2024-29888 Saleor vulnerable to customers addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method
Saleor is an e-commerce platform that serves high-volume companies. When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue...
CVE-2024-29888 Saleor vulnerable to customers addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method
Saleor is an e-commerce platform that serves high-volume companies. When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue...
PT-2024-23111
Name of the Vulnerable Software and Affected Versions Saleor versions prior to 3.14.61 Saleor versions prior to 3.15.37 Saleor versions prior to 3.16.34 Saleor versions prior to 3.17.32 Saleor versions prior to 3.18.28 Saleor versions prior to 3.19.15 Description The issue occurs when using Picku...
Apache Kylin Information Disclosure Vulnerability (CNVD-2024-22238)
Apache Kylin is the United States Apache Apache Foundation of an open source distributed analytical data warehouse . The product mainly provides Hadoop/Spark on top of the SQL query interface and multidimensional analysis OLAP and other functions. Apache Kylin suffers from an information disclosu...
CVE-2023-52107
Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
PT-2024-14404 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability where permissions are not strictly verified in the WMS module. This could potentially affect service confidentiality ...
PT-2024-14399 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability where parameters are not verified in the WMS module. Successful exploitation of this vulnerability may affect service...
Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data
Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. Vulnerability Details CVEID:CVE-2023-43646 DESCRIPTION: Chai.js Assertion Library get-func-name is vulnerable to...