Lucene search
+L

4777 matches found

Vulnrichment
Vulnrichment
added 2025/01/03 2:00 a.m.15 views

CVE-2025-0176 code-projects Point of Sales and Inventory Management System add_cart.php sql injection

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/addcart.php. The manipulation of the argument id/qty leads to sql injection. The attack may be initiated...

6.5CVSS7.3AI score0.00446EPSS
SaveExploits1References5
OSV
OSV
added 2025/01/03 1:15 a.m.9 views

CVE-2025-0174

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /user/searchresult2.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. I...

6.5CVSS5.7AI score0.00429EPSS
SaveExploits1References5
CVE
CVE
added 2025/01/03 12:31 a.m.74 views

CVE-2025-0174

CVE-2025-0174 affects code-projects Point of Sales and Inventory Management System 1.0. The vulnerability resides in /user/search_result2.php (Parameter Handler) where the search parameter handling enables remote SQL injection. Exploitation has been disclosed publicly and is corroborated by multi...

6.5CVSS6.8AI score0.00429EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/01/03 12:00 a.m.13 views

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which stems from an SQL injection...

6.5CVSS7AI score0.00429EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/01/03 12:00 a.m.8 views

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS7AI score0.00429EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/03 12:00 a.m.11 views

PT-2025-3771 · Code Projects · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /user/search result.php. The manipulation of the id argument leads to SQ...

6.5CVSS7.1AI score0.00429EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/01/03 12:00 a.m.7 views

PT-2025-3765 · Code Projects · Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue affects the processing of the file /user/add cart.php, where the manipulation of the argument id/qty leads to SQL injection. The attack may...

7.5CVSS6.9AI score0.00446EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/01/03 12:00 a.m.10 views

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which stems from an SQL injection...

6.5CVSS7.1AI score0.00429EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/01/03 12:00 a.m.13 views

Code-Projects Point of Sales and Inventory Management System SQL注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. A SQL injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS7AI score0.00429EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/03 12:00 a.m.12 views

PT-2025-3770 · Code Projects · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue was found in the code-projects Point of Sales and Inventory Management System. This issue affects the /user/search.php file, where the...

6.5CVSS7AI score0.00429EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/01/03 12:00 a.m.11 views

PT-2025-3763 · Unknown · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue affects an unknown part of the file /user/search result2.php of the component Parameter Handler. The manipulation of the search argument...

6.5CVSS7.2AI score0.00429EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/01/03 12:00 a.m.7 views

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

6.5CVSS7AI score0.00429EPSS
SaveExploits1References5
NVD
NVD
added 2024/12/27 7:15 p.m.16 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.9CVSS0.00611EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/27 7:15 p.m.8 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.9CVSS5.8AI score0.00611EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/27 12:00 a.m.7 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

5.7AI score0.00611EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/27 12:00 a.m.7 views

SimplCommerce 安全漏洞

SimplCommerce is SimplCommerce open source a simple, cross-platform, modular e-commerce system built on . A security vulnerability exists in SimplCommerce. An attacker could exploit the vulnerability to bypass inventory limits and submit simultaneous purchase requests for the same product from...

5.9CVSS6.7AI score0.00611EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/27 12:00 a.m.81 views

CVE-2024-53476

CVE-2024-53476 concerns SimplCommerce with commit 230310c8d7a0408569b292c5a805c459d47a1d8f. A race condition in the checkout logic allows attackers to bypass inventory restrictions by submitting purchase requests from multiple accounts for the same product, leading to overselling when stock is li...

5.9CVSS7.1AI score0.00611EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/27 12:00 a.m.25 views

CVE-2024-53476

A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simultaneously submitting purchase requests from multiple accounts for the same product. This can lead to overselling when stock is limited, as t...

0.00611EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/12/25 12:00 a.m.7 views

Dell Inventory Collector Incorrect Link Resolution Before File Access Vulnerability

Dell Inventory Collector is a tool provided by Dell for collecting device information, mainly used to collect system information such as hardware configuration, operating system version, service packs, and so on from client systems. Dell Inventory Collector suffers from an incorrect link resoluti...

7.8CVSS6.9AI score0.00193EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/24 12:00 a.m.9 views

Pagure 安全漏洞

Pagure is a Pagure open source Git repository written in Python that provides web services. A security vulnerability exists in Pagure that stems from support for symbolic links during the storage of inventory files allowing the disclosure of local files...

8.1CVSS6.1AI score0.00564EPSS
SaveExploits0References1
Rows per page
Query Builder