4723 matches found
Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38213)
Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletegroup.php component not adequately verifying that a request comes from a trust...
Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38215)
Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteproduct.php component not adequately verifying that a request comes from a...
Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38216)
Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteuser.php component not adequately verifying that a request comes from a truste...
CVE-2024-42550
A cross-site scripting XSS vulnerability in the component /email/welcome.php of Mini Inventory and Sales Management System commit 18aa3d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...
CVE-2024-42550
CVE-2024-42550 is an XSS vulnerability in the Mini Inventory and Sales Management System, exploitable via the /email/welcome.php component (commit 18aa3d). The issue arises from injecting a crafted payload into the Title parameter, enabling execution of arbitrary scripts/HTML in a victim’s browse...
CVE-2024-42550
A cross-site scripting XSS vulnerability in the component /email/welcome.php of Mini Inventory and Sales Management System commit 18aa3d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...
CVE-2024-42550
A cross-site scripting XSS vulnerability in the component /email/welcome.php of Mini Inventory and Sales Management System commit 18aa3d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...
PT-2024-30010 · Unknown · Mini-Inventory-And-Sales-Management-System
Name of the Vulnerable Software and Affected Versions: Mini Inventory and Sales Management System version commit 18aa3d Description: A cross-site scripting XSS issue in the /email/welcome.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into t...
CVE-2024-42584
A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42584
A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42583
A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42583
A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42586
A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42586
A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42585
A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42585
A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42581
A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42579
A Cross-Site Request Forgery CSRF in the component addgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...