Lucene search
+L

763 matches found

OSV
OSV
•added 2023/02/10 4:15 p.m.•9 views

CVE-2023-24232

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

4.8CVSS5.9AI score0.0048EPSS
SaveExploits0References2
OSV
OSV
•added 2023/02/10 4:15 p.m.•18 views

CVE-2023-24234

A stored cross-site scripting XSS vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter...

4.8CVSS5.9AI score0.0048EPSS
SaveExploits0References2
NVD
NVD
•added 2023/02/10 4:15 p.m.•23 views

CVE-2023-24231

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Categories Name parameter...

4.8CVSS4.9AI score0.0048EPSS
SaveExploits0References2
Prion
Prion
•added 2023/02/10 4:15 p.m.•25 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Categories Name parameter...

4.3CVSS4.9AI score0.0048EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/02/10 4:15 p.m.•28 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter...

4.3CVSS4.9AI score0.0048EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/02/10 4:15 p.m.•20 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Client Name parameter...

4.3CVSS4.9AI score0.0048EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/02/10 4:15 p.m.•19 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

4.3CVSS4.9AI score0.0048EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/02/10 12:00 a.m.•12 views

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Inventory Management System v1. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the...

4.8CVSS5.7AI score0.0048EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/10 12:00 a.m.•12 views

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Inventory Management System v1. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the...

4.8CVSS5.7AI score0.0048EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/02/10 12:00 a.m.•11 views

CVE-2023-24232

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

5.7AI score0.0048EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/10 12:00 a.m.•11 views

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Inventory Management System v1. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the...

4.8CVSS5.7AI score0.0048EPSS
SaveExploits0References3
CVE
CVE
•added 2023/02/10 12:00 a.m.•63 views

CVE-2023-24233

CVE-2023-24233 describes a stored XSS in the Inventory Management System v1, specifically in the component /php-inventory-management-system/orders.php?o=add. The vulnerability is triggered via the Client Name parameter, enabling an attacker to inject arbitrary web scripts or HTML. Documented impa...

4.8CVSS4.9AI score0.0048EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/10 12:00 a.m.•0 views

CVE-2023-24232: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

4.8CVSS6AI score0.0048EPSS
SaveExploits0References3
CVE
CVE
•added 2023/02/10 12:00 a.m.•145 views

CVE-2023-24232

CVE-2023-24232 corresponds to a stored XSS in Inventory Management System v1, specifically in the /php-inventory-management-system/product.php component. The vulnerability allows an attacker to inject crafted payloads via the Product Name parameter to execute arbitrary web scripts/HTML. Reported ...

4.8CVSS4.9AI score0.0048EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/02/10 12:00 a.m.•65 views

CVE-2023-24234

CVE-2023-24234 affects Inventory Management System v1, specifically the php-inventory-management-system/brand.php component. The vulnerability is a stored XSS that allows an attacker to inject arbitrary web scripts or HTML via the Brand Name parameter. Reported impact is execution of scripts with...

4.8CVSS4.9AI score0.0048EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/02/10 12:00 a.m.•34 views

CVE-2023-24232

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

5.1AI score0.0048EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/02/10 12:00 a.m.•35 views

CVE-2023-24231

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Categories Name parameter...

5.1AI score0.0048EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/02/10 12:00 a.m.•11 views

CVE-2023-24234

A stored cross-site scripting XSS vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter...

5.7AI score0.0048EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/02/10 12:00 a.m.•8 views

CVE-2023-24231

A stored cross-site scripting XSS vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Categories Name parameter...

5.7AI score0.0048EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/10 12:00 a.m.•1 views

CVE-2023-24234: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter...

4.8CVSS6AI score0.0048EPSS
SaveExploits0References3
Rows per page
Query Builder