4774 matches found
CVE-2023-46450
Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...
CVE-2023-46449
Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function...
CVE-2023-46450
Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...
CVE-2023-46449
Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function...
Cross site scripting
Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...
Exploit for Cross-site Scripting in Mayurik Inventory_Management_System
-CVE-2023-46450 Description Sourcecodester Free and Ope...
Exploit for Incorrect Permission Assignment for Critical Resource in Mayurik Inventory_Management_System
CVE-2023-46449 Incorrect Access Control VIDEO POC LINK https:...
CVE-2023-46450
Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...
Inventory Management System Cross-Site Scripting Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Inventory Management System version 1.0 due to a cross-site scripting XSS vulnerability in the Add supplier function...
CVE-2023-46450
Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...
CVE-2023-46449
CVE-2023-46449 affects Sourcecodester Free and Open Source Inventory Management System v1.0. The vulnerability is an Incorrect Access Control (IDOR) in the password-change function that allows an arbitrary user to change another user’s password and take over an account. Reported exploitation deta...
PT-2023-30030 · Sourcecodester · Sourcecodester Free/Open Source Inventory Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Free and Open Source inventory management system version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Add supplier function. This means an attacker could potentially inject malicious scripts into th...
CVE-2023-46449
Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function...
Inventory Management System Security Vulnerability
Inventory Management System is an inventory management system by the individual developers of stemword. A security vulnerability exists in Inventory Management System v1.0 that could allow an attacker to change any user's password and take over the account via an IDOR in the password change...
CVE-2023-46450
CVE-2023-46450 affects Sourcecodester Free and Open Source inventory management system 1.0. the vulnerability is a Cross-Site Scripting (XSS) flaw in the Add supplier function. exploitation is described as authenticated stored XSS with remote attack potential; impact is limited to the user sessio...
Who's Experimenting with AI Tools in Your Organization?
With the record-setting growth of consumer-focused AI productivity tools like ChatGPT, artificial intelligence—formerly the realm of data science and engineering teams—has become a resource available to every employee. From a productivity perspective, that's fantastic. Unfortunately for IT and...
Zscaler Client Connector Buffer Error Vulnerability
Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...
2023 OWASP Top-10 Series: Wrap Up
Over the past several months, we've taken a journey through the new 2023 OWASP API Security Top-10 list. In the previous 12 weekly posts, we've delved into each category, discussed what it is, how it's exploited, why it matters, and suggested effective protections for each. Now, as we conclude th...
The vulnerability of the sell_return.php script of the SourceCodester Inventory Management System allows a hacker to execute arbitrary SQL queries.
The vulnerability of the sellreturn.php script in the SourceCodester Inventory Management System is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the file edit_update.php script in the SourceCodester Inventory Management System allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the file editupdate.php script in the SourceCodester Inventory Management System is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...