Lucene search
+L

4722 matches found

NVD
NVD
added 2023/09/04 1:15 a.m.26 views

CVE-2023-4749

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS7.2AI score0.00863EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/04 1:15 a.m.7 views

CVE-2023-4749

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00863EPSS
SaveExploits1References3
Prion
Prion
added 2023/09/04 1:15 a.m.34 views

Information disclosure

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS9.5AI score0.00863EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/09/04 12:31 a.m.43 views

CVE-2023-4749

CVE-2023-4749 affects SourceCodester Inventory Management System 1.0 (index.php). The vulnerability arises from manipulating the optional page argument to the file index.php, enabling file inclusion and remote access. Multiple sources corroborate a critical severity, with CVSS-derived scores indi...

9.8CVSS7.2AI score0.00863EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/04 12:31 a.m.16 views

CVE-2023-4749 SourceCodester Inventory Management System index.php file inclusion

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS7.2AI score0.00863EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/09/04 12:31 a.m.29 views

CVE-2023-4749 SourceCodester Inventory Management System index.php file inclusion

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS9.8AI score0.00863EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/09/04 12:0 a.m.8 views

Inventory Management System Security Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in SourceCodester Inventory Management System version 1.0, which stems from the parameter page in the file index.php that causes the file to be included...

9.8CVSS6.8AI score0.00863EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/09/04 12:0 a.m.12 views

PT-2023-30466 · Unknown · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file index.php. The manipulation of the page argument leads to file inclusion. This issue can b...

9.8CVSS6.9AI score0.00863EPSS
SaveExploits1References4
NVD
NVD
added 2023/09/01 6:15 p.m.23 views

CVE-2023-39714

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section...

6.1CVSS6.1AI score0.00537EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/09/01 6:15 p.m.6 views

CVE-2023-39714

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section...

6.1CVSS6.5AI score0.00537EPSS
SaveExploits1References4
OSV
OSV
added 2023/09/01 6:15 p.m.7 views

CVE-2023-39714

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section...

6.1CVSS5.9AI score0.00537EPSS
SaveExploits1References3
Prion
Prion
added 2023/09/01 6:15 p.m.17 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section...

5.8CVSS6AI score0.00537EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2023/09/01 2:15 p.m.20 views

CVE-2023-39710

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section...

6.1CVSS6.1AI score0.00537EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/01 2:15 p.m.7 views

CVE-2023-39710

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section...

6.1CVSS5.9AI score0.00537EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/09/01 12:0 a.m.13 views

CVE-2023-39714

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section...

6.2AI score0.00537EPSS
SaveExploits1References3
CVE
CVE
added 2023/09/01 12:0 a.m.39 views

CVE-2023-39710

CVE-2023-39710 documents multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0. The issue allows attackers to inject arbitrary web scripts or HTML by crafting payloads into the Name, Address, and Company fields in the Add Customer section, le...

6.1CVSS6AI score0.00537EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/01 12:0 a.m.8 views

PT-2023-27082 · Unknown · Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: Free and Open Source Inventory Management System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Name, Address, and Company parameters under the "Add Custome...

6.1CVSS6.8AI score0.00537EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/09/01 12:0 a.m.6 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free and Open Source Inventory Management System v1.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that could allow an attacke...

6.1CVSS5.8AI score0.00537EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/09/01 12:0 a.m.17 views

PT-2023-27085 · Unknown · Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: Free and Open Source Inventory Management System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the "Add New...

6.1CVSS6.7AI score0.00537EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/09/01 12:0 a.m.6 views

Free and Open Source Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free and Open Source Inventory Management System v1.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that could allow an attacke...

6.1CVSS5.9AI score0.00537EPSS
SaveExploits1References4
Rows per page
Query Builder