Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editcategorie.php component not adequately verifying that a request comes from a...

PT-2024-30039 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit product.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...

CVE-2024-42579: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component addgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42584: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42585: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42577: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component addproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42581: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42577

A Cross-Site Request Forgery CSRF in the component addproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42585

A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42585

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Warehouse Inventory System v2.0 . The issue stems from the delete_media.php component failing to adequately verify that incoming requests originate from a trusted user. An attacker can exploit this weakness to spoof malicious request...

CVE-2024-42578: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component editproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42582: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deletecategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42583: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addproduct.php component not adequately verifying that a request comes from a truste...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38220)

Warehouse Inventory System is a warehouse inventory management system for the OSWAPP community. A cross-site request forgery vulnerability exists in Warehouse Inventory System versions 1.0 and 2.0, which stems from the /changepassword.php file containing a cross-site request forgery vulnerability...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38221)

Warehouse Inventory System is a warehouse inventory management system for the OSWAPP community. A cross-site request forgery vulnerability exists in Warehouse Inventory System versions 1.0 and 2.0, which can be exploited by an attacker to cause cross-site request forgery...

CVE-2024-7460

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /changepassword.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...

CVE-2024-7460

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /changepassword.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...

CVE-2024-7459

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /editaccount.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-7459

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /editaccount.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been...