Dell Command Monitor Elevation of Privilege Vulnerability

The Dell Command Monitor software application enables IT administrators to easily manage fleet inventory, monitor system operating conditions, modify BIOS settings, and remotely collect information from deployed Dell client systems. Proactive system health monitoring can help reduce total system...

Why less is more: 10 steps to secure customer data

In an advisory aimed at the protection of customers’ personal data, the Australian Cyber Security Centre ACSC has emphasized that businesses should only collect personal data from customers that they need in order to operate effectively. While that may seem like kicking in an open door, it’s real...

The vulnerability of the GLPI system’s request, incident, and asset inventory management, related to insecure privilege management, allows a malicious actor to gain unauthorized access to any user’s account.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the account of any user...

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment arises from the use of a field in the ITIL form for submitting requests, which allows an attacker to obtain the administrator’s account information.

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment lies in the use of a input field for ITIL entities in the request form. Exploiting this vulnerability could allow a malicious actor to gain access to the administrator’s account by sending a...

The vulnerability of the Kanban function in the GLPI system for scheduling, incident management, and inventory tracking allows a malicious individual to gain unauthorized access to any user’s account.

The vulnerability of the Kanban function in systems for requests, incidents, and inventory management of computer equipment in GLPI is related to insecure privilege management. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the account of any user...

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management system, related to the unlimited loading of dangerous type files, allows a violator to load any files into the system.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the unlimited ability to upload dangerous files. Exploiting this vulnerability allows a malicious actor to upload any files into the system...

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

CVE-2023-46582

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...

CVE-2023-46580

Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...

CVE-2023-46582

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

CVE-2023-46580

Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...

CVE-2023-46580

Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

CVE-2023-46582

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...

Sql injection

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

Cross site scripting

Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...

Sql injection

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by the individual developer of stemword. A cross-site scripting vulnerability exists in Inventory Management System version V1.0 that could allow an attacker to execute arbitrary code via the pname parameter of the editProduct.php...