136 matches found
CVE-2022-36687
The CVE-2022-36687 entry concerns Ingredients Stock Management System v1.0 with an arbitrary file deletion vulnerability in the component /classes/Master.php?f=delete_img. The root cause is lack of validation for the delete file path, enabling arbitrary file deletion. Documented impacts include h...
CVE-2022-36686
Ingredients Stock Management System v1.0 contains a SQL injection via the month parameter at /admin/?page=reports/stockin&month=, caused by insufficient validation of external input in the month parameter. This vulnerability is documented as CVE-2022-36686 with a CVSS v3.1 base score of 8.8 (HIGH...
PT-2022-23553 · Unknown · Ingredients Stock Management System
Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the month parameter at the "/admin/?page=reports/stockin&month=" endpoint...
PT-2022-23556 · Unknown · Ingredients Stock Management System
Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the month parameter at the "/admin/?page=reports/waste&month=" endpoint...
PT-2022-23554 · Unknown · Ingredients Stock Management System
Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue allows for arbitrary file deletion via the /classes/Master.php component, specifically through the f parameter set to delete img. Recommendations: For Ingredients Stock...
Ingredients Stock Management System SQL Injection Vulnerability
Ingredients Stock Management System is an ingredient stock management system by Carlo Montero. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /classes/Master .php?f=deletewaste location has an SQL injection issue with the id parameter. No...
Ingredients Stock Management System SQL注入漏洞
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /admin/?page= reports/stockout&month= is missing validation of external...
Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11185)
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. .php?f=deleteitem location has an SQL injection issue with the id parameter. No detailed vulnerability details are available at this time...
Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11186)
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /classes/Master .php?f=deletecategory location of the id parameter has a...
PT-2022-23555 · Unknown · Ingredients Stock Management System
Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the month parameter at the "/admin/?page=reports/stockout&month=" endpoint...
Ingredients Stock Management System 路径遍历漏洞
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of Ingredients Stock Management System is vulnerable to an arbitrary file deletion vulnerability in component /classes/ Master.php?f=deleteimg lacks validation for the delete...
Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11188)
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of the Ingredients Stock Management System is vulnerable to a SQL injection vulnerability in the /classes/Master .php?f=deletestockout location has an SQL injection issue wit...
Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11187)
Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. .php?f=deletestockin location has a SQL injection issue with the id parameter. No detailed vulnerability details are available at this time...
PT-2022-23558 · Unknown · Ingredients Stock Management System
Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=user/manage user&id=" endpoint. Recommendations:...
CVE-2022-36705
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /stocks/managewaste.php...
CVE-2022-36705
Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /stocks/managewaste.php...
CVE-2022-36706
CVE-2022-36706 affects Ingredients Stock Management System v1.0, with a SQL injection vulnerability in the Id parameter of /stocks/manage_stockout.php. Root cause: unsanitized input enabling injected SQL. Impact: high on confidentiality, integrity, and availability (per CVSS vector in NVD). Explo...
PT-2022-23570 · Unknown · Ingredients Stock Management System
Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Id parameter at the "/stocks/manage waste.php" API endpoint. Recommendations: For...
PT-2022-23571 · Unknown · Ingredients Stock Management System
Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Id parameter at the "/stocks/manage stockout.php" API endpoint. There is no...