Lucene search
K

1283 matches found

CNNVD
CNNVD
added 2024/01/02 12:0 a.m.1 views

CodeAstro Internet Banking System Code Issue Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A code issue exists in CodeAstro Internet Banking System version 1.0 and prior versions where a vulnerability exists due to unknown handling of the file pagesaccount.php in the component Profile Picture Handler,...

9.8CVSS7AI score0.00195EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/01/02 12:0 a.m.2 views

PT-2024-15377 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System versions up to 1.0 Description: A critical issue has been found in the CodeAstro Internet Banking System, affecting some unknown processing of the file pages account.php of the component Profile Picture...

9.8CVSS7AI score0.00195EPSS
Exploits1References9
NVD
NVD
added 2023/12/13 9:15 p.m.10 views

CVE-2023-6775

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /item/itemcon. The manipulation of the argument itemname leads to cross site scripting. It is possible to initiate the attack remotely. T...

6.1CVSS0.00194EPSS
Exploits1References3
OSV
OSV
added 2023/12/13 9:15 p.m.2 views

CVE-2023-6775

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /item/itemcon. The manipulation of the argument itemname leads to cross site scripting. It is possible to initiate the attack remotely. T...

6.1CVSS3.8AI score
Exploits0References3
Prion
Prion
added 2023/12/13 9:15 p.m.22 views

Cross site scripting

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /item/itemcon. The manipulation of the argument itemname leads to cross site scripting. It is possible to initiate the attack remotely. T...

4CVSS6.4AI score0.00194EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/12/13 8:31 p.m.27 views

CVE-2023-6775

CVE-2023-6775 affects CodeAstro POS and Inventory Management System 1.0. The vulnerability is a Cross-Site Scripting in the unknown part of the file /item/item_con caused by manipulation of the item_name argument. Attacks can be initiated remotely; exploits have been disclosed publicly. Several s...

6.1CVSS4.8AI score0.00194EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/13 8:31 p.m.13 views

CVE-2023-6775 CodeAstro POS and Inventory Management System item_con cross site scripting

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /item/itemcon. The manipulation of the argument itemname leads to cross site scripting. It is possible to initiate the attack remotely. T...

4CVSS6.2AI score0.00194EPSS
Exploits1References3
OSV
OSV
added 2023/12/13 8:15 p.m.3 views

CVE-2023-6774

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /accountscon/registeraccount. The manipulation of the argument Username with the input alertdocument.cookie leads to cross...

5.4CVSS3.6AI score0.00141EPSS
Exploits1References3
NVD
NVD
added 2023/12/13 8:15 p.m.9 views

CVE-2023-6774

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /accountscon/registeraccount. The manipulation of the argument Username with the input alertdocument.cookie leads to cross...

5.4CVSS0.00141EPSS
Exploits1References3
OSV
OSV
added 2023/12/13 8:15 p.m.1 views

CVE-2023-6773

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

8.8CVSS4.8AI score
Exploits0References3
NVD
NVD
added 2023/12/13 8:15 p.m.10 views

CVE-2023-6773

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

8.8CVSS0.0005EPSS
Exploits1References3
Prion
Prion
added 2023/12/13 8:15 p.m.14 views

Cross site scripting

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /accountscon/registeraccount. The manipulation of the argument Username with the input alertdocument.cookie leads to cross...

5CVSS6.4AI score0.00141EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2023/12/13 8:15 p.m.19 views

Improper access control

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

4CVSS7.2AI score0.0005EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/12/13 8:0 p.m.24 views

CVE-2023-6774

CodeAstro POS and Inventory Management System 1.0 contains an XSS vulnerability in /accounts_con/register_account. The Username parameter can be injected with a script tag () to execute arbitrary script in the victim’s browser. Exploitation is possible remotely and the public disclosure of the ex...

5.4CVSS4.6AI score0.00141EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/12/13 7:31 p.m.24 views

CVE-2023-6773

CVE-2023-6773 affects CodeAstro POS and Inventory Management System 1.0, with an access control vulnerability in the User Creation Handler’s unknown function at /accounts_con/register_account. By supplying the value Admin to the parameter account_type , an attacker can trigger improper access con...

8.8CVSS6.6AI score0.0005EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/13 7:31 p.m.15 views

CVE-2023-6773 CodeAstro POS and Inventory Management System User Creation register_account access control

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accountscon/registeraccount of the component User Creation Handler. The manipulation of the argument accountty...

4.3CVSS9AI score0.0005EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/12/13 12:0 a.m.5 views

PT-2023-32773 · Unknown · Codeastro Pos/Inventory Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS and Inventory Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown functionality of the file /accounts con/register account. The manipulation of th...

5.4CVSS4.7AI score0.00141EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2023/12/13 12:0 a.m.5 views

PT-2023-32772 · Unknown · Codeastro Pos/Inventory Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS and Inventory Management System version 1.0 Description: A vulnerability has been found in the system, allowing for improper access controls. The issue is related to the manipulation of the account type argument with the input...

8.8CVSS4.8AI score0.0005EPSS
Exploits1References6
CNNVD
CNNVD
added 2023/12/13 12:0 a.m.1 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in CodeAstro POS and Inventory Management System version 1.0, which stems from an unknown section in /item/itemcon, leading to cross-site scripting via the...

6.1CVSS6.2AI score0.00194EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/12/13 12:0 a.m.2 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in CodeAstro POS and Inventory Management System version 1.0, which stems from the presence of an unknown function in /accountscon/registeraccount that lead...

5.4CVSS6.1AI score0.00141EPSS
Exploits1References4
Rows per page
Query Builder