Lucene search
+L

4723 matches found

Prion
Prion
added 2024/01/08 6:15 p.m.24 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce.This issue affects Simple Inventory Management – just scan barcode to manage products and...

7.5CVSS7.9AI score0.00553EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/08 5:42 p.m.2 views

CVE-2023-52215 WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce.This issue affects Simple Inventory Management – just scan barcode to manage products and...

9.3CVSS8.9AI score0.00553EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/08 5:42 p.m.32 views

CVE-2023-52215 WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce.This issue affects Simple Inventory Management – just scan barcode to manage products and...

9.3CVSS10AI score0.00553EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/08 5:42 p.m.54 views

CVE-2023-52215

CVE-2023-52215 affects the WordPress plugin “Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce.” The issue is an unauthenticated SQL injection via the userToken parameter in versions up to 1.5.1 (up to and including 1.5.1). A fix is available in versio...

9.8CVSS8.9AI score0.00553EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.9 views

PT-2024-14479 · Ukrsolution · Ukrsolution Simple Inventory Management

Name of the Vulnerable Software and Affected Versions: UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce versions through 1.5.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special...

9.8CVSS9.5AI score0.00553EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.8 views

WordPress Plugin Simple Inventory Management SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

9.8CVSS7.7AI score0.00553EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/01/08 12:0 a.m.16 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to SQL Injection

Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-52215 Patch priority High CVSS severity High 9.3 Developer DMitry PSID d2f18e777f52 Credits Rafie Muhammad Patchstack...

9.8CVSS6.8AI score0.00553EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/01/08 12:0 a.m.16 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File Upload

Software Barcode Scanner with Inventory & Order Manager Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-52221 Patch priority High CVSS severity High 10 Developer DMitry PSID 073220446f1e Credits Rafie Muhammad...

10CVSS6.8AI score0.00631EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/01/04 12:0 a.m.7 views

Ocs Inventory Cross-Site Scripting Vulnerability

Ocs Inventory is an asset management solution from Ocs. enabling users to inventory It assets. A cross-site scripting vulnerability exists in Ocs Inventory that stems from allowing the storage of email templates with special characters, which leads to stored cross-site scripting...

6.9CVSS5.8AI score0.00544EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/29 6:15 a.m.11 views

CVE-2023-7157

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /app/ajax/sellreturndata.php. The manipulation of the argument columns0data leads to sql injection. The attack may be...

9.8CVSS5.7AI score0.00657EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/29 6:15 a.m.15 views

Sql injection

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /app/ajax/sellreturndata.php. The manipulation of the argument columns0data leads to sql injection. The attack may be...

6.5CVSS7.7AI score0.00657EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/29 6:0 a.m.40 views

CVE-2023-7157 SourceCodester Free and Open Source Inventory Management System sell_return_data.php sql injection

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /app/ajax/sellreturndata.php. The manipulation of the argument columns0data leads to sql injection. The attack may be...

6.5CVSS10AI score0.00657EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/29 6:0 a.m.53 views

CVE-2023-7157

CVE-2023-7157 affects SourceCodester Free and Open Source Inventory Management System 1.0. Connected sources confirm a SQL injection in /app/ajax/sell_return_data.php via the columns[0][data] parameter, with remote feasibility and public disclosure. The vulnerability targets the file processing p...

9.8CVSS8.3AI score0.00657EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/12/29 5:15 a.m.6 views

CVE-2023-7155

A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown part of the file /ample/app/action/editproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate t...

8.8CVSS5.7AI score0.00634EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/29 5:15 a.m.20 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown part of the file /ample/app/action/editproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate t...

6.5CVSS7.7AI score0.00634EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/12/29 5:0 a.m.52 views

CVE-2023-7155

The CVE-2023-7155 entry affects SourceCodester Free and Open Source Inventory Management System 1.0. A SQL injection exists in the vulnerable file /ample/app/action/edit_product.php, exploitable by manipulating the id parameter. The issue enables remote exploitation and has publicly disclosed exp...

8.8CVSS7.8AI score0.00634EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/29 5:0 a.m.29 views

CVE-2023-7155 SourceCodester Free and Open Source Inventory Management System edit_product.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown part of the file /ample/app/action/editproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate t...

6.5CVSS9.1AI score0.00634EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/12/29 12:0 a.m.8 views

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which originates from a security issue in the /app/ajax/sellreturndata.php page...

9.8CVSS7.8AI score0.00657EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/12/29 12:0 a.m.5 views

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which originates from a security issue in the /ample/app/action/editproduct.php page...

8.8CVSS7.8AI score0.00634EPSS
SaveExploits1References4
NVD
NVD
added 2023/12/28 4:16 p.m.21 views

CVE-2023-7163

A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the...

10CVSS0.01673EPSS
SaveExploits1References1
Rows per page
Query Builder