4722 matches found
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WP Inventory Manager plugin = 2.1.0.13 versions...
CVE-2023-34002
CVE-2023-34002 is a CSRF vulnerability in the WP Inventory Manager WordPress plugin up to version 2.1.0.13. Exploitation details in the connected records indicate Cross-Site Request Forgery via actions like delete_item, with unauthenticated attacker impact potential, and a high CVSS-like score de...
CVE-2023-34002 WordPress WP Inventory Manager plugin <= 2.1.0.13 - Cross Site Request Forgery (CSRF) vulnerability
A vulnerability in mylacventures WP Inventory Manager wp-inventory-manager.This issue affects WP Inventory Manager: from n/a through = 2.1.0.13...
CVE-2023-34002 WordPress WP Inventory Manager Plugin <= 2.1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WP Inventory Manager plugin = 2.1.0.13 versions...
PT-2023-24622 · WordPress · Wp Inventory Manager
Name of the Vulnerable Software and Affected Versions: WP Inventory Manager plugin versions = 2.1.0.13 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...
WordPress Plugin WP Inventory Manager Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2023-46235
CVE-2023-46235 affects the FOG project prior to version 1.5.10.15, where a lack of request sanitization in log handling allows a malicious request containing XSS to be stored in a log file. When an administrator views the logs in the dashboard, the content is parsed as HTML, enabling XSS exposure...
CVE-2023-46449
Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function...
CVE-2023-46450
Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...
CVE-2023-46449
Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function...
CVE-2023-46450
Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...
CVE-2023-46449
Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function...
CVE-2023-46450
Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...
Cross site scripting
Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function...
Exploit for Cross-site Scripting in Mayurik Inventory_Management_System
-CVE-2023-46450 Description Sourcecodester Free and Ope...
Exploit for Incorrect Permission Assignment for Critical Resource in Mayurik Inventory_Management_System
CVE-2023-46449 Incorrect Access Control VIDEO POC LINK https:...
Inventory Management System Cross-Site Scripting Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Inventory Management System version 1.0 due to a cross-site scripting XSS vulnerability in the Add supplier function...
CVE-2023-46449
CVE-2023-46449 affects Sourcecodester Free and Open Source Inventory Management System v1.0. The vulnerability is an Incorrect Access Control (IDOR) in the password-change function that allows an arbitrary user to change another user’s password and take over an account. Reported exploitation deta...