Lucene search
+L

4769 matches found

CVE
CVE
added 2023/08/27 10:31 p.m.69 views

CVE-2023-4558

CVE-2023-4558 affects SourceCodester Inventory Management System 1.0, where an SQL injection is possible via staff_data.php and the argument columns[0][data]. The vulnerability arises from manipulating that parameter, enabling remote exploitation. Multiple sources (NVD, Red Hat, CVE records) conf...

9.8CVSS8.4AI score0.00649EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/08/27 10:00 p.m.34 views

CVE-2023-4557 SourceCodester Inventory Management System search_purchase_paymen_report.php sql injection

A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/searchpurchasepaymenreport.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack...

6.5CVSS10AI score0.00535EPSS
SaveExploits0References3
CVE
CVE
added 2023/08/27 10:00 p.m.58 views

CVE-2023-4557

CVE-2023-4557 affects SourceCodester Inventory Management System 1.0. The vulnerability is in an unknown function of the file app/ajax/search_purchase_paymen_report.php; manipulating the customer parameter leads to an SQL injection. The issue permits remote exploitation and has been publicly disc...

9.8CVSS8.3AI score0.00535EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/08/27 7:15 a.m.8 views

CVE-2023-4555

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file suppliardata.php. The manipulation of the argument name/company leads to cross site scripting. The attack can be...

6.1CVSS3.8AI score0.0043EPSS
SaveExploits0References3
NVD
NVD
added 2023/08/27 7:15 a.m.25 views

CVE-2023-4555

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file suppliardata.php. The manipulation of the argument name/company leads to cross site scripting. The attack can be...

6.1CVSS4.5AI score0.0043EPSS
SaveExploits0References3
Prion
Prion
added 2023/08/27 7:15 a.m.28 views

Cross site scripting

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file suppliardata.php. The manipulation of the argument name/company leads to cross site scripting. The attack can be...

4CVSS6AI score0.0043EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/27 6:00 a.m.15 views

CVE-2023-4555 SourceCodester Inventory Management System suppliar_data.php cross site scripting

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file suppliardata.php. The manipulation of the argument name/company leads to cross site scripting. The attack can be...

4CVSS6.2AI score0.0043EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/08/27 6:00 a.m.43 views

CVE-2023-4555 SourceCodester Inventory Management System suppliar_data.php cross site scripting

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file suppliardata.php. The manipulation of the argument name/company leads to cross site scripting. The attack can be...

4CVSS6.2AI score0.0043EPSS
SaveExploits0References3
CVE
CVE
added 2023/08/27 6:00 a.m.144 views

CVE-2023-4555

SourceCodester Inventory Management System 1.0 is affected by CVE-2023-4555 via an unsafely handled parameter in suppliar_data.php (name/company), enabling cross-site scripting. The vulnerability can be triggered remotely and has been publicly disclosed. Red Hat and CVE records corroborate the is...

6.1CVSS4.5AI score0.0043EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/08/27 12:00 a.m.8 views

Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system by stemword individual developers. Inventory Management System version 1.0 has a SQL injection vulnerability that originates from the parameter customer in the file app/ajax/searchpurchasepaymenreport.php that can lead to SQL injection...

9.8CVSS7.1AI score0.00535EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/08/27 12:00 a.m.6 views

PT-2023-29577 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Inventory Management System. The issue affects an unknown function of the file app/ajax/search purchase paymen...

9.8CVSS7.2AI score0.00535EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2023/08/27 12:00 a.m.9 views

Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system by the individual developer of stemword. Inventory Management System version 1.0 suffers from a SQL injection vulnerability that stems from the parameter columns0data in the file staffdata.php, which can lead to sql injection...

9.8CVSS7.1AI score0.00649EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/08/27 12:00 a.m.10 views

PT-2023-29578 · Unknown · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Inventory Management System. The issue affects an unknown functionality of the file staff data.php. The manipulation ...

9.8CVSS7.5AI score0.00649EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2023/08/27 12:00 a.m.7 views

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in SourceCodester Inventory Management System version 1.0, which stems from the parameter name/company in the file suppliardata.php that causes cross-site...

6.1CVSS4.1AI score0.0043EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/08/26 12:00 a.m.9 views

PT-2023-29570 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Inventory Management System, affecting an unknown functionality of the file suppliar data.php. The manipulation of the...

6.1CVSS4.3AI score0.0043EPSS
SaveExploits0References7
OSV
OSV
added 2023/08/25 8:15 p.m.8 views

CVE-2023-39707

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

5.4CVSS5.9AI score0.00591EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/08/25 8:15 p.m.5 views

CVE-2023-39707

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

5.4CVSS6.2AI score0.00591EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/08/25 12:00 a.m.9 views

CVE-2023-39707

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

5.8AI score0.00591EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/08/25 12:00 a.m.11 views

PT-2023-27078 · Unknown · Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: Free and Open Source Inventory Management System version 1.0 Description: A stored cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter...

5.4CVSS5.3AI score0.00591EPSS
SaveExploits1References12
Cvelist
Cvelist
added 2023/08/25 12:00 a.m.37 views

CVE-2023-39707

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section...

5.5AI score0.00591EPSS
SaveExploits1References3
Rows per page
Query Builder