CVE-2023-39714

In Free and Open Source Inventory Management System v1.0, there are multiple XSS vulnerabilities that allow attackers to execute arbitrary web scripts/HTML by injecting payloads into the Name, Address, and Company fields in the Add New Member form. The documents confirm client-side script executi...

CVE-2023-39709

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Member section...

CVE-2023-39709

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Member section...

CVE-2023-39708

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

CVE-2023-39708

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

CVE-2023-39708

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

CVE-2023-39709

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Member section...

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system from the individual developers of stemword. A security vulnerability exists in Free and Open Source Inventory Management System v1.0 that could allow an attacker to execute arbitrary web script or HTML by injecting a crafted payload in...

CVE-2023-39708

CVE-2023-39708 corresponds to a stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0. The issue arises from injecting arbitrary web scripts/HTML via the Add New parameter under the New Buy section. Affected component is the web application; the ...

CVE-2023-39709

CVE-2023-39709 affects Free and Open Source Inventory Management System v1.0. The issue is multiple cross-site scripting (XSS) vulnerabilities that allow attackers to inject arbitrary web scripts via the Name, Address, and Company fields in the Add Member section. The CVSS v3.1 base score is 6.1 ...

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free and Open Source Inventory Management System v1.0 that could allow an attacker to execute arbitrary web script or HTML by injecting a crafted payload into the Ad...

CVE-2023-4558

A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staffdata.php. The manipulation of the argument columns0data leads to sql injection. The attack can be launched remotely. The...

CVE-2023-4558

A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staffdata.php. The manipulation of the argument columns0data leads to sql injection. The attack can be launched remotely. The...

CVE-2023-4557

A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/searchpurchasepaymenreport.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack...

CVE-2023-4557

A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/searchpurchasepaymenreport.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack...

Sql injection

A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staffdata.php. The manipulation of the argument columns0data leads to sql injection. The attack can be launched remotely. The...

CVE-2023-4558

CVE-2023-4558 affects SourceCodester Inventory Management System 1.0, where an SQL injection is possible via staff_data.php and the argument columns[0][data]. The vulnerability arises from manipulating that parameter, enabling remote exploitation. Multiple sources (NVD, Red Hat, CVE records) conf...

CVE-2023-4558 SourceCodester Inventory Management System staff_data.php sql injection

A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staffdata.php. The manipulation of the argument columns0data leads to sql injection. The attack can be launched remotely. The...

CVE-2023-4557

CVE-2023-4557 affects SourceCodester Inventory Management System 1.0. The vulnerability is in an unknown function of the file app/ajax/search_purchase_paymen_report.php; manipulating the customer parameter leads to an SQL injection. The issue permits remote exploitation and has been publicly disc...

CVE-2023-4557 SourceCodester Inventory Management System search_purchase_paymen_report.php sql injection

A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/searchpurchasepaymenreport.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack...