CVE-2024-24135

Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0 are vulnerable to XSS attacks...

CVE-2024-24135

Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0 are vulnerable to XSS attacks...

PT-2024-20288 · Sourcecodester · Sourcecodester Product Inventory With Export To Excel

Name of the Vulnerable Software and Affected Versions: Sourcecodester Product Inventory with Export to Excel version 1.0 Description: The issue concerns cross-site scripting XSS attacks. Specifically, the Product Name and Product Code in the 'Add Product' section are vulnerable to such attacks...

CVE-2024-23894

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stockissuancecreate.php, in the issuancedate parameter. Exploitation of this...

CVE-2024-23896

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stock.php, in the batchno parameter. Exploitation of this vulnerability could allo...

CVE-2024-23891

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter. Exploitation of this vulnerability could...

CVE-2024-23891

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter. Exploitation of this vulnerability could...

Cross site scripting

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itempopup.php, in the description parameter. Exploitation of this vulnerability...

Cross site scripting

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/costcentermodify.php, in the costcenterid parameter. Exploitation of this...

Cross site scripting

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stockissuancecreate.php, in the issuancedate parameter. Exploitation of this...

CVE-2024-23896

CVE-2024-23896 affects Cups Easy (Purchase & Inventory) v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by insufficient encoding of user-controlled inputs in the batchno parameter of /cupseasylive/stock.php, enabling an attacker to craft a URL that could steal session cookies ...

CVE-2024-23894 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stockissuancecreate.php, in the issuancedate parameter. Exploitation of this...

CVE-2024-23894

CVE-2024-23894 affects Cups Easy (Purchase & Inventory) v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the issuancedate parameter of the /cupseasylive/stockissuancecreate.php endpoint, caused by insufficient encoding of user-controlled input. Impact described in sources: an authe...

CVE-2024-23893

CVE-2024-23893 affects Cups Easy (Purchase & Inventory) v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the costcenterid parameter of /cupseasylive/costcentermodify.php caused by insufficient encoding. An attacker could lure an authenticated user to click a crafted URL, potentiall...

CVE-2024-23892

CVE-2024-23892 affects Cups Easy (Purchase & Inventory) 1.0. The vulnerability is a cross-site scripting flaw in the costcenterid parameter of /cupseasylive/costcentercreate.php, caused by insufficient encoding. An attacker could craft a URL to an authenticated user and potentially steal session ...

CVE-2024-23891

Cups Easy (Purchase & Inventory) version 1.0 is affected by an XSS in the /cupseasylive/itemcreate.php endpoint, via the itemid parameter, caused by insufficient input encoding. An attacker could entice an authenticated user to visit a crafted URL, potentially allowing theft of session cookies. P...

CVE-2024-23890 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itempopup.php, in the description parameter. Exploitation of this vulnerability...

CVE-2024-23890

CVE-2024-23890 concerns Cups Easy (Purchase & Inventory) v1.0. The vulnerability is a Cross‑Site Scripting (XSS) flaw caused by insufficient encoding of the description parameter in the page /cupseasylive/itempopup.php, allowing an attacker to craft a URL that, when opened by an authenticated use...

CVE-2024-23889

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemgroupcreate.php, in the itemgroupid parameter. Exploitation of this...

CVE-2024-23888

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stocktransactionslist.php, in the itemidy parameter. Exploitation of this...