Lucene search
+L

987 matches found

Exploit DB
Exploit DB
added 2021/03/26 12:00 a.m.301 views

Regis Inventory And Monitoring System 1.0 - 'Item List' Persistent Cross-Site Scripting

Title: Regis Inventory And Monitoring System 1.0 - 'Item List' Persistent Cross-Site Scripting Exploit Author: George Tsimpidas Date: 2021-03-25 Vendor Homepage: www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/regisinventory.zip Version ...

5.3AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/01/27 1:15 p.m.7 views

CVE-2020-36012

Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field...

4.8CVSS5.7AI score0.00562EPSS
SaveExploits1References4
NVD
NVD
added 2020/09/01 5:15 p.m.23 views

CVE-2020-23836

A Cross-Site Request Forgery CSRF vulnerability in edituser.php in OSWAPP Warehouse Inventory System aka OSWA-INV through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site...

8.8CVSS8.8AI score0.00645EPSS
SaveExploits1References2
OSV
OSV
added 2020/09/01 5:15 p.m.8 views

CVE-2020-23836

A Cross-Site Request Forgery CSRF vulnerability in edituser.php in OSWAPP Warehouse Inventory System aka OSWA-INV through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site...

8.8CVSS7.4AI score0.00645EPSS
SaveExploits1References2
Prion
Prion
added 2020/09/01 5:15 p.m.22 views

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability in edituser.php in OSWAPP Warehouse Inventory System aka OSWA-INV through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site...

6.8CVSS8.7AI score0.00645EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2020/09/01 4:41 p.m.45 views

CVE-2020-23836

CVE-2020-23836 describes a CSRF vulnerability in OSWAPP Warehouse Inventory System (OSWA-INV) in edit_user.php up to 2020-08-10 that allows an authenticated admin visiting a third-party site to change the admin password. CVSS v3.1 vectors: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with base score 8.8 (...

8.8CVSS8.7AI score0.00645EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/09/01 4:41 p.m.41 views

CVE-2020-23836

A Cross-Site Request Forgery CSRF vulnerability in edituser.php in OSWAPP Warehouse Inventory System aka OSWA-INV through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site...

8.8AI score0.00645EPSS
SaveExploits1References2
CNVD
CNVD
added 2020/08/11 12:00 a.m.6 views

Warehouse Inventory System Cross-Site Request Forgery Vulnerability

Warehouse Inventory System is an open source inventory management system based on php and mysql . Warehouse Inventory System suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to send unintended requests to the server via an affected client...

6.9AI score
SaveExploits0References1
zdt
zdt
added 2020/08/10 12:00 a.m.189 views

Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password) Exploit

Exploit for php platform in category web applications Exploit Title: Warehouse Inventory System 1.0 - Cross-Site Request Forgery Change Admin Password Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Vendor Homepage: https://oswapp.com Software Link:...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/08/10 12:00 a.m.369 views

Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password)

Exploit Title: Warehouse Inventory System 1.0 - Cross-Site Request Forgery Change Admin Password Exploit Author: Bobby Cooke boku & Adeeb Shah @hyd3sec Date: 2020-08-09 Vendor Homepage: https://oswapp.com Software Link: https://github.com/siamon123/warehouse-inventory-system/archive/master.zip...

5.3AI score
SaveExploits0
CNVD
CNVD
added 2018/11/20 12:00 a.m.15 views

Bakeshop Inventory System SQL Injection Vulnerability

Bakeshop Inventory System is a bakery inventory management system. A SQL injection vulnerability exists in Bakeshop Inventory System version 1.0. A remote attacker can use the login page to view, add, modify, or delete information in the back-end database...

9.8CVSS9.6AI score0.03213EPSS
SaveExploits5References1
OSV
OSV
added 2018/11/16 6:29 p.m.7 views

CVE-2018-18804

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

9.8CVSS5.8AI score0.03213EPSS
SaveExploits5References2
NVD
NVD
added 2018/11/16 6:29 p.m.24 views

CVE-2018-18804

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

9.8CVSS9.8AI score0.03213EPSS
SaveExploits5References2
Prion
Prion
added 2018/11/16 6:29 p.m.17 views

Sql injection

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

7.5CVSS9.8AI score0.03213EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
added 2018/11/16 6:00 p.m.38 views

CVE-2018-18804

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...

9.9AI score0.03213EPSS
SaveExploits5References2
zdt
zdt
added 2018/10/31 12:00 a.m.59 views

Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...

0.3AI score0.03213EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2018/10/29 12:00 a.m.40 views

Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection

Exploit Title: Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...

9.8CVSS8.4AI score0.03213EPSS
SaveExploits5
exploitpack
exploitpack
added 2018/10/29 12:00 a.m.65 views

Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection

Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Exploit Title: Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Softwar...

7.5CVSS0.5AI score0.03213EPSS
SaveExploits5
exploitpack
exploitpack
added 2018/10/25 12:00 a.m.35 views

Simple POS and Inventory 1.0 - cat SQL Injection

Simple POS and Inventory 1.0 - cat SQL Injection Exploit Title: Simple POS and Inventory 1.0 - 'cat' SQL Injection Dork: N/A Date: 2018-10-24 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/php/11625/simple-pos-and-inventory-system.html Software Link:...

0.2AI score
SaveExploits0
Qualys Blog
Qualys Blog
added 2017/04/10 4:00 p.m.26 views

IT Asset Inventory Systems and CMDBs: A Marriage Made in InfoSec Heaven

A key capability of an IT asset inventory system is being able to exchange data with CMDBs Configuration Management Databases. In fact, a common misconception is that organizations with CMDBs don’t need an IT asset inventory system because their functions overlap. While they have similar roles,...

7AI score
SaveExploits0
Rows per page
Query Builder