CVE-2024-42584

A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42585

A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

PT-2024-30045 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete user.php component allows attackers to escalate privileges, potentially leading to unauthorized user deletion. Recommendations: For...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletecategorie.php component not adequately verifying that a request comes from a...

PT-2024-30048 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the categorie.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disablin...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addgroup.php component not adequately verifying that a request comes from a trusted...

PT-2024-30039 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit product.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...

CVE-2024-42578

A Cross-Site Request Forgery CSRF in the component editproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addproduct.php component not adequately verifying that a request comes from a truste...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteproduct.php component not adequately verifying that a request comes from a...

CVE-2024-42579

A Cross-Site Request Forgery CSRF in the component addgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

PT-2024-30044 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete categorie.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteuser.php component not adequately verifying that a request comes from a truste...

CVE-2024-42580

A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

PT-2024-30037 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit categorie.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...

PT-2024-30047 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version v2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete media.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version v2.0, consider...

CVE-2024-42585

CVE-2024-42585 affects Warehouse Inventory System v2.0, specifically the delete_media.php component. The CSRF vulnerability allows privilege escalation with a high CVSS base score (8.8; AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation is CSRF requiring user interaction, and there is no vendor-s...

CVE-2024-42579

A Cross-Site Request Forgery CSRF in the component addgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42582

A Cross-Site Request Forgery CSRF in the component deletecategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletemedia.php component not adequately verifying that a request comes from a trust...