4723 matches found
Inventory Management System Cross-Site Scripting Vulnerability
Inventory Management System is an inventory management system by the individual developer of stemword. A cross-site scripting vulnerability exists in Inventory Management System version V1.0 that could allow an attacker to execute arbitrary code via the pname parameter of the editProduct.php...
CVE-2023-46581
CVE-2023-46581 : Inventory Management v1.0 contains a SQL injection in registration.php via the name, uname and email parameters, enabling a local attacker to execute arbitrary code. Root cause is unsanitized inputs. Exploitation status and official remediation are not detailed in the provided do...
CVE-2023-46582
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...
Inventory Management System Security Vulnerability
Inventory Management System is an inventory management system by the individual developers of stemword. A security vulnerability in Inventory Management System version 1.0 exists that allows local attackers to execute arbitrary code via the name, uname, and email parameters in the Registration.ph...
CVE-2023-46580
CVE-2023-46580 describes a cross-site scripting (XSS) vulnerability in Inventory Management V1.0 where the pname parameter of the editProduct.php component can be exploited to run arbitrary script in the victim’s browser. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) indicates a netwo...
Inventory Management System SQL Injection Vulnerability
Inventory Management System is an inventory management system by the individual developer of stemword. A SQL injection vulnerability exists in Inventory Management System version V1.0, which originates from a vulnerability that allows local attackers to execute arbitrary SQL commands via the id...
CVE-2023-46582
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...
CVE-2023-46581
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...
PT-2023-30099 · Unknown · Inventory Management
Name of the Vulnerable Software and Affected Versions: Inventory Management version 1.0 Description: The issue allows a local attacker to execute arbitrary code via the name, uname, and email parameters in the "registration.php" component. This is a SQL injection vulnerability. Recommendations: F...
CVE-2023-46580
Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...
CVE-2023-46580
Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...
CVE-2023-46582
The CVE-2023-46582 entry describes a SQL injection in Inventory Management v.1.0, exploitable by a local attacker through the id parameter in deleteProduct.php. The vulnerability affects the Inventory Management component (deleteProduct.php) and stems from improper handling of the id input, allow...
The vulnerability of the GLPI system for requests, incidents, and inventory management, related to the disclosure of information that allows a hacker to expose the protected information
The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the improper elimination of special elements used in SQL commands, allows a hacker to gain access to the administrator account.
The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow a malicious actor to gain control of the administrator’s account remotely...
The vulnerability of the GLPI system for requests, incidents, and inventory management, related to the disclosure of information that allows a hacker to expose the protected information
The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
xfsdump bug fix and enhancement update
An update is available for xfsdump. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The xfsdump package contains xfsdump, xfsrestore, and other utilities for...
MAL-2023-8505 Malicious code in @tpgroup/tpg-icon-inventory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cacf2bbe7dd64c7907b4bd3e3bf524d701e8c930d3aa540683dad15d74fdd15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
HotelDruid Security Breach
HotelDruid is a hotel management system by the Digitaldruid.net team. The system includes features such as room management, financial management and inventory management. A security vulnerability exists in HotelDruid 3.0.5 and earlier versions, which stems from a cross-site scripting XSS...
