EUVD-2023-54410

Malicious code in bioql PyPI...

EUVD-2025-19525

Malicious code in bioql PyPI...

EUVD-2024-17648

Malicious code in bioql PyPI...

EUVD-2023-54063

Malicious code in bioql PyPI...

EUVD-2023-43410

Malicious code in bioql PyPI...

EUVD-2022-38487

Malicious code in bioql PyPI...

EUVD-2025-19110

Malicious code in bioql PyPI...

EUVD-2025-19138

Malicious code in bioql PyPI...

EUVD-2023-43408

Malicious code in bioql PyPI...

CVE-2025-40641 Stored Cross-Site Scripting (XSS) in the Multi-purpose Inventory Management System

Cross-site Scripting XSS vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request using the productname parameter in /ControllerProducts/update. This vulnerability could allow a remote us...

CVE-2025-40641

CVE-2025-40641 corresponds to a stored Cross-Site Scripting (XSS) vulnerability in the Multi-Purpose Inventory Management System (Codester). The flaw arises from insufficient validation of user input in a POST request to /Controller_Products/update, specifically via the product_name parameter, en...

Chemical Inventory Management System 安全漏洞

Chemical Inventory Management System is a software with simplified tracking and management of laboratory items by Deepak Misal Individual Developer. A security vulnerability exists in Chemical Inventory Management System version 1.0, which stems from a SQL injection due to incorrect manipulation ...

Inventory Management System editUser.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter edituserName in the file /phpaction/editUser.php. An attacker can...

CVE-2025-6902

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /phpaction/editUser.php. The manipulation of the argument edituserName leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-6901

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2025-6891

A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0. Affected is an unknown function of the file /phpaction/createUser.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-6834

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/editPayment.php. The manipulation of the argument orderId leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-6827

A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /phpaction/editOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2025-6823

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /phpaction/editProduct.php. The manipulation of the argument editProductName leads to sql injection. The attack may be initiated...

CVE-2025-6822

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /phpaction/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely...