Lucene search
+L

1338 matches found

Vulnrichment
Vulnrichment
•added 2025/05/10 1:31 p.m.•11 views

CVE-2025-4502 Campcodes Sales and Inventory System creditor_add.php sql injection

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditoradd.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS7.5AI score0.00555EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/10 12:00 a.m.•3 views

CVE-2025-4503: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/customerupdate.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has bee...

9.8CVSS7AI score0.00575EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/10 12:00 a.m.•4 views

CVE-2025-4502: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditoradd.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

9.8CVSS6.9AI score0.00555EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/09 10:15 a.m.•21 views

CVE-2025-0348

A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /data/addemployee.php. The manipulation of the argument data leads to cross site scripting. The attack may be initiated remotely. T...

5.4CVSS0.00519EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/09 10:00 a.m.•40 views

CVE-2025-0348 CampCodes DepEd Equipment Inventory System add_employee.php cross site scripting

A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /data/addemployee.php. The manipulation of the argument data leads to cross site scripting. The attack may be initiated remotely. T...

5.3CVSS0.00519EPSS
SaveExploits1References5
CVE
CVE
•added 2025/01/09 10:00 a.m.•76 views

CVE-2025-0348

CVE-2025-0348 affects CampCodes DepEd Equipment Inventory System 1.0. The vulnerability is a cross-site scripting flaw triggered by manipulating the data argument in /data/add_employee.php, with remote exploitation possible and the exploit publicly disclosed. Source documents consistently describ...

5.4CVSS3.9AI score0.00519EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/09 10:00 a.m.•13 views

CVE-2025-0348 CampCodes DepEd Equipment Inventory System add_employee.php cross site scripting

A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /data/addemployee.php. The manipulation of the argument data leads to cross site scripting. The attack may be initiated remotely. T...

5.3CVSS6.2AI score0.00519EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•5 views

CVE-2025-0348: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /data/addemployee.php. The manipulation of the argument data leads to cross site scripting. The attack may be initiated remotely. T...

5.4CVSS3.9AI score0.00519EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•26 views

PT-2025-3843 · Unknown · Campcodes Deped Equipment Inventory System

Name of the Vulnerable Software and Affected Versions: CampCodes DepEd Equipment Inventory System version 1.0 Description: A vulnerability was found in the system, rated as problematic. It affects the processing of the file /data/add employee.php, where the manipulation of the data argument leads...

5.4CVSS4.4AI score0.00519EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•21 views

CampCodes DepEd Equipment Inventory System 代码注入漏洞

CampCodes DepEd Equipment Inventory System is a DepEd equipment inventory system from CampCodes, Inc. A code injection vulnerability exists in version 1.0 of the CampCodes DepEd Equipment Inventory System, which stems from the parameter data being susceptible to cross-site scripting attacks...

5.4CVSS4.8AI score0.00519EPSS
SaveExploits1References5
OSV
OSV
•added 2025/01/04 4:15 a.m.•11 views

CVE-2025-0201

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/updateaccount.php. The manipulation of the argument username leads to sql injection. The attack may be...

6.5CVSS5.8AI score0.00429EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/04 12:00 a.m.•21 views

PT-2025-3773 · Unknown · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /user/search num.php. The manipulation of the search argument...

6.5CVSS7.2AI score0.0052EPSS
SaveExploits1References9
OSV
OSV
•added 2025/01/03 8:15 p.m.•16 views

CVE-2025-0197

A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability affects unknown code of the file /user/search.php. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS5.8AI score0.00429EPSS
SaveExploits1References5
OSV
OSV
•added 2025/01/03 6:15 p.m.•14 views

CVE-2025-0195

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/delproduct.php. The manipulation of the argument id leads to sql injection. The attack may be launch...

6.5CVSS5.8AI score0.00429EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•14 views

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS7AI score0.00429EPSS
SaveExploits1References5
CNVD
CNVD
•added 2024/08/23 12:00 a.m.•15 views

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38218)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editgroup.php component not adequately verifying that a request comes from a trusted...

8.8CVSS6.5AI score0.00222EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/08/23 12:00 a.m.•39 views

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38219)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editproduct.php component not adequately verifying that a request comes from a trust...

8CVSS6.5AI score0.00299EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/08/23 12:00 a.m.•19 views

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38217)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editcategorie.php component not adequately verifying that a request comes from a...

8.8CVSS6.5AI score0.00307EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/08/23 12:00 a.m.•38 views

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38216)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteuser.php component not adequately verifying that a request comes from a truste...

8.8CVSS6.5AI score0.00307EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/08/23 12:00 a.m.•23 views

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38215)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteproduct.php component not adequately verifying that a request comes from a...

8.8CVSS6.5AI score0.00307EPSS
SaveExploits1References1
Rows per page
Query Builder