PT-2024-30042 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit group.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disabli...

CVE-2024-42577

A Cross-Site Request Forgery CSRF in the component addproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

PT-2024-30046 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete product.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...

CVE-2024-42576

CVE-2024-42576 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Warehouse Inventory System v2.0. The flaw is in the component edit_categorie.php , where insufficient request validation allows an attacker to provoke privileged actions, enabling privilege escalation. Affected prod...

CVE-2024-42582

CVE-2024-42582 describes a Cross-Site Request Forgery (CSRF) in the Warehouse Inventory System v2.0, specifically in the delete_categorie.php component. The vulnerability enables privilege escalation and is consistently reported across sources, with Red Hat and CNVD notes reinforcing that request...

CVE-2024-42577

CVE-2024-42577 describes a Cross-Site Request Forgery in Warehouse Inventory System v2.0, specifically the add_product.php component, which can lead to privilege escalation. Red Hat and CNVD entries reiterate that the issue stems from insufficient checks on request origin/verification, enabling a...

CVE-2024-42584

CVE-2024-42584 affects Warehouse Inventory System v2.0, specifically the delete_product.php component. The CSRF vulnerability allows an unauthenticated attacker to induce a victim to perform privileged actions, enabling privilege escalation. Root cause is insufficient verification of request orig...

CVE-2024-42576

A Cross-Site Request Forgery CSRF in the component editcategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42583

CVE-2024-42583 affects Warehouse Inventory System v2.0 in the delete_user.php component. A Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to escalate privileges by spoofing a request to delete or act on users. The root cause is inadequate verification that requests originate f...

CVE-2024-42579

CVE-2024-42579 is a CSRF vulnerability in the Warehouse Inventory System v2.0, specifically in the add_group.php component, as described across multiple sources. The underlying issue is that requests from untrusted sources may be coerced to perform privileged actions, enabling privilege escalatio...

CVE-2024-42583

A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42578

The data describes a Cross-Site Request Forgery (CSRF) in the Warehouse Inventory System v2.0, specifically in the edit_product.php component, which can allow privilege escalation. Affected product/version is Warehouse Inventory System v2.0; root cause is CSRF due to insufficient verification of ...

The vulnerability of the Dell Inventory Collector software’s equipment inventory system lies in the incorrect limitation of the path to the restricted-access catalog. This allows a perpetrator to execute arbitrary code.

The vulnerability of Dell Inventory Collector’s software for inventory management is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38220)

Warehouse Inventory System is a warehouse inventory management system for the OSWAPP community. A cross-site request forgery vulnerability exists in Warehouse Inventory System versions 1.0 and 2.0, which stems from the /changepassword.php file containing a cross-site request forgery vulnerability...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38221)

Warehouse Inventory System is a warehouse inventory management system for the OSWAPP community. A cross-site request forgery vulnerability exists in Warehouse Inventory System versions 1.0 and 2.0, which can be exploited by an attacker to cause cross-site request forgery...

Introducing the Rapid7 Command Platform

Integrated Security Operations for the Next-Generation Attack Surface As cybercrime and attack surfaces have sprawled, Rapid7 has been able to grow with our customers because we are relentlessly focused on relevance. The way we see it, relevance doesn’t mean aligning to market definitions of...

CVE-2024-7460

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /changepassword.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...

CVE-2024-7460

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /changepassword.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...

CVE-2024-7459

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /editaccount.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-7459

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been classified as problematic. Affected is an unknown function of the file /editaccount.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been...