Lucene search
+L

6225 matches found

CVE
CVE
•added 2026/03/30 12:00 a.m.•36 views

CVE-2026-30556

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 . The flaw is located in the index.php file due to the application's failure to properly sanitize the "msg" parameter. This allows a remote attacker to inject arbitrary web scripts or HTML...

6.1CVSS6.2AI score0.0031EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•5 views

CVE-2026-30557: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.1CVSS6AI score0.0031EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•3 views

CVE-2026-30564: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.0031EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/03/30 12:00 a.m.•46 views

CVE-2026-30557

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

0.0031EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•25 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter websi...

6.1CVSS5.6AI score0.00264EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•25 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter msg i...

6.1CVSS5.6AI score0.0031EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/30 12:00 a.m.•38 views

CVE-2026-30565

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewsupplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

0.0031EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•6 views

CVE-2026-30557

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.0031EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/30 12:00 a.m.•6 views

CVE-2026-30556

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

6.2AI score0.0031EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•22 views

CVE-2026-30565

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewsupplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.0031EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•22 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter limit...

6.1CVSS5.6AI score0.0031EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•16 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter limit...

6.1CVSS5.6AI score0.0031EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/30 12:00 a.m.•41 views

CVE-2026-30559

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addsales.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML...

0.0031EPSS
SaveExploits1References1
CVE
CVE
•added 2026/03/30 12:00 a.m.•35 views

CVE-2026-30561

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 . The flaw is located in the add_purchase.php file due to improper sanitization of the msg parameter. This allows remote attackers to inject arbitrary web scripts or HTML via a crafted URL...

6.1CVSS6.2AI score0.0031EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•22 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter msg i...

6.1CVSS5.6AI score0.0031EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•30 views

PT-2026-29040

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add customer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6AI score0.0031EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30562

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addstock.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML...

9.3CVSS6AI score0.00472EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/30 12:00 a.m.•36 views

CVE-2026-30562

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addstock.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML...

0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•4 views

CVE-2026-30561: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addpurchase.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.1CVSS6AI score0.0031EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30561

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addpurchase.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.2AI score0.0031EPSS
SaveExploits1References1
Rows per page
Query Builder