Lucene search
+L

4767 matches found

EUVD
EUVD
added 2025/10/08 3:32 p.m.8 views

EUVD-2025-33169

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...

5.4CVSS5.4AI score0.00236EPSS
SaveExploits1References4
OSV
OSV
added 2025/10/08 2:15 p.m.7 views

CVE-2025-60314

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...

5.4CVSS6AI score0.00236EPSS
SaveExploits1References3
OSV
OSV
added 2025/10/08 4:16 a.m.9 views

CVE-2025-11431

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS5.7AI score0.00367EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 4:02 a.m.2 views

CVE-2025-11431 code-projects Web-Based Inventory and POS System transaction.php sql injection

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

6.5CVSS6.6AI score0.00367EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/08 4:02 a.m.23 views

CVE-2025-11431

Code-Projects Web-Based Inventory and POS System 1.0 contains an SQL injection in the /transaction.php file, triggered by manipulating the shopid parameter in an unknown function. Remote exploitation is possible, and public disclosure of the exploit is noted in multiple sources. Affected componen...

9.8CVSS6.4AI score0.00367EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/08 4:02 a.m.20 views

CVE-2025-11431 code-projects Web-Based Inventory and POS System transaction.php sql injection

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

6.5CVSS0.00367EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/08 2:15 a.m.8 views

CVE-2025-11424

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

9.8CVSS5.7AI score0.00441EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/08 2:15 a.m.13 views

CVE-2025-11424

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

9.8CVSS0.00441EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/08 2:02 a.m.21 views

CVE-2025-11424 code-projects Web-Based Inventory and POS System login.php sql injection

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

7.5CVSS0.00441EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 2:02 a.m.5 views

CVE-2025-11424 code-projects Web-Based Inventory and POS System login.php sql injection

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclos...

7.5CVSS6.6AI score0.00441EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/10/08 12:00 a.m.8 views

code-projects Web-Based Inventory and POS System 安全漏洞

Code-Projects Web-Based Inventory and POS System is a web-based inventory and POS system from Code-Projects open source. A security vulnerability exists in version 1.0 of the code-projects Web-Based Inventory and POS System, which stems from an incorrect manipulation of the parameter emailid in t...

9.8CVSS7.7AI score0.00441EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/08 12:00 a.m.13 views

PT-2025-41214

Name of the Vulnerable Software and Affected Versions code-projects Web-Based Inventory and POS System version 1.0 Description A flaw exists in code-projects Web-Based Inventory and POS System 1.0. The issue is related to the manipulation of the emailid argument in the /login.php file, which can...

9.8CVSS7.6AI score0.00441EPSS
SaveExploits1References11
CVE
CVE
added 2025/10/08 12:00 a.m.23 views

CVE-2025-60314

Summary : CVE-2025-60314 affects Configuroweb Sistema Web de Inventario 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) caused by the lack of input sanitization on the product name parameter (Nombre:Producto). An authenticated attacker can inject malicious JavaScript payloads and ex...

5.4CVSS5.5AI score0.00236EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2025/10/08 12:00 a.m.12 views

Code-Projects Web-Based Inventory and POS System 安全漏洞

Code-Projects Web-Based Inventory and POS System is a web-based inventory and POS system from Code-Projects open source. A security vulnerability exists in version 1.0 of the code-projects Web-Based Inventory and POS System, which stems from an incorrect manipulation of the parameter shopid in th...

9.8CVSS6.9AI score0.00367EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/08 12:00 a.m.12 views

PT-2025-41222

Name of the Vulnerable Software and Affected Versions code-projects Web-Based Inventory and POS System version 1.0 Description A flaw exists in code-projects Web-Based Inventory and POS System. The issue is related to SQL injection, triggered by manipulating the shopid argument in a file named...

9.8CVSS6.9AI score0.00367EPSS
SaveExploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-0020

Malware in sbrugna...

7.8CVSS6.7AI score0.00489EPSS
SaveExploits0References24
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2007-4779

Malware in sbrugna...

6.6CVSS6.4AI score0.00335EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2010-1620

Malware in sbrugna...

4.3CVSS6.1AI score0.01131EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-1947

Malware in sbrugna...

6.5CVSS6.4AI score0.0101EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-12113

Malware in sbrugna...

9.8CVSS9.4AI score0.01517EPSS
SaveExploits1References2
Rows per page
Query Builder