Lucene search
+L

4759 matches found

Vulnrichment
Vulnrichment
added 2026/03/30 12:0 a.m.4 views

CVE-2026-30566

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewcustomers.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script o...

6AI score0.0021EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/03/30 12:0 a.m.24 views

CVE-2026-30556

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

0.00252EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/30 12:0 a.m.28 views

CVE-2026-30560

Affected product: SourceCodester Sales and Inventory System 1.0. The CVE-2026-30560/vulnerability is a Reflected Cross-Site Scripting (XSS) in add_supplier.php via the msg parameter, due to inadequate input sanitization. Consequence: attackers can inject arbitrary web script/HTML through a crafte...

6.1CVSS6AI score0.00252EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2026/03/30 12:0 a.m.21 views

CVE-2026-30566

CVE-2026-30566 is a reflected XSS in SourceCodester Sales and Inventory System 1.0, caused by failure to sanitize the limit parameter in view_customers.php. This allows remote attackers to inject arbitrary script/HTML via a crafted URL. Affected component: view_customers.php (limit parameter); im...

6.1CVSS6AI score0.0021EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/30 12:0 a.m.4 views

CVE-2026-30561

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addpurchase.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00252EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/30 12:0 a.m.4 views

CVE-2026-30556

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

6AI score0.00252EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.16 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter msg i...

9.3CVSS5.6AI score0.00321EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.12 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter limit...

6.1CVSS5.6AI score0.00205EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.16 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter msg i...

6.1CVSS5.6AI score0.00266EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.20 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter msg i...

6.1CVSS5.6AI score0.00252EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/30 12:0 a.m.19 views

CVE-2026-30559

CVE-2026-30559 affects SourceCodester Sales and Inventory System 1.0. A Reflected Cross-Site Scripting (XSS) vulnerability exists in add_sales.php via the msg parameter, where input is not sanitized, allowing remote attackers to inject arbitrary script/HTML through a crafted URL. The CVSS basis i...

6.1CVSS6AI score0.00266EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.9 views

CVE-2026-30567

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the viewproduct.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

6.1CVSS6AI score0.00271EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.9 views

CVE-2026-30571

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the viewcategory.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

6.1CVSS6AI score0.00266EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.8 views

CVE-2026-30575

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtqty" parameter during stock entry, allowing negative values to be processed. This causes the system to decrease the inventory level...

7.5CVSS5.8AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.7 views

CVE-2026-30568

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in in the viewpurchase.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

4.8CVSS6AI score0.00241EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.10 views

CVE-2026-30570

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the viewsales.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

6.1CVSS6AI score0.00266EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.7 views

CVE-2026-30569

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewstockavailability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web...

6.1CVSS6AI score0.00266EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/27 6:31 p.m.7 views

EUVD-2026-16730

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Inventory System 1.0 in in the viewpurchase.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

4.8CVSS6AI score0.00241EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/03/27 6:31 p.m.10 views

EUVD-2026-16728

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Inventory System 1.0 in the viewproduct.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

6AI score0.00271EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/03/27 6:31 p.m.9 views

EUVD-2026-16707

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtqty" parameter during stock entry, allowing negative values to be processed. This causes the system to decrease the inventory level...

7.5CVSS5.8AI score0.00421EPSS
SaveExploits1References2
Rows per page
Query Builder