CVE-2023-6305

CVE-2023-6305 affects SourceCodester Free and Open Source Inventory Management System 1.0. The vulnerability exists in the file ample/app/ajax/suppliar_data.php where manipulation of the columns argument enables SQL injection. The issue can be triggered remotely and is disclosed publicly. Connect...

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...

PT-2023-32606 · Unknown · Sourcecodester Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /ample/app/ajax/member data.php. The manipulation of the columns argument...

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by the individual developer of stemword. A SQL injection vulnerability exists in Inventory Management System version V1.0, which originates from a vulnerability that allows local attackers to execute arbitrary SQL commands via the id...

Inventory Management System Security Vulnerability

Inventory Management System is an inventory management system by the individual developers of stemword. A security vulnerability in Inventory Management System version 1.0 exists that allows local attackers to execute arbitrary code via the name, uname, and email parameters in the Registration.ph...

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by the individual developer of stemword. A cross-site scripting vulnerability exists in Inventory Management System version V1.0 that could allow an attacker to execute arbitrary code via the pname parameter of the editProduct.php...

CVE-2023-46449

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function...

CVE-2023-46450

Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...

Exploit for Cross-site Scripting in Mayurik Inventory_Management_System

-CVE-2023-46450 Description Sourcecodester Free and Ope...

Exploit for Incorrect Permission Assignment for Critical Resource in Mayurik Inventory_Management_System

CVE-2023-46449 Incorrect Access Control VIDEO POC LINK https:...

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Inventory Management System version 1.0 due to a cross-site scripting XSS vulnerability in the Add supplier function...

Inventory Management System Security Vulnerability

Inventory Management System is an inventory management system by the individual developers of stemword. A security vulnerability exists in Inventory Management System v1.0 that could allow an attacker to change any user's password and take over the account via an IDOR in the password change...

PT-2023-30030 · Sourcecodester · Sourcecodester Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Free and Open Source inventory management system version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Add supplier function. This means an attacker could potentially inject malicious scripts into th...

The vulnerability of the file edit_update.php script in the SourceCodester Inventory Management System allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the file editupdate.php script in the SourceCodester Inventory Management System is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2023-39712

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section...

CVE-2023-39712

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section...

Free and Open Source Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system. Inventory Management System v1.0 version of the cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the Name, Address parameter, which can be exploited...

CVE-2023-39712

CVE-2023-39712 corresponds to multiple XSS vulnerabilities in Free and Open Source Inventory Management System v1.0. The issue arises from lack of proper filtering/escaping of user-provided data in the Name, Address, and Company fields under the Add New Put section, enabling attackers to inject a...

CVE-2023-39711

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Subtotal and Paidbill parameters under the Add New Put section...

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in SourceCodester Free and Open Source Inventory Management System v1.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that could...