CVE-2022-0515

Cross-Site Request Forgery CSRF in GitHub repository crater-invoice/crater prior to 6.0.4...

CVE-2022-0514

Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5...

CVE-2022-0514

Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5...

CVE-2022-0515

Cross-Site Request Forgery CSRF in GitHub repository crater-invoice/crater prior to 6.0.4...

CVE-2022-0515

CVE-2022-0515 is a CSRF vulnerability in crater-invoice/crater prior to version 6.0.4. The issue affects the web application’s CSRF protection, enabling an attacker to cause a logged-in user to be logged out by visiting a malicious site (PoC shows triggering a logout). The condition is that the v...

CVE-2022-0515 Cross-Site Request Forgery (CSRF) in crater-invoice/crater

Cross-Site Request Forgery CSRF in GitHub repository crater-invoice/crater prior to 6.0.4...

CVE-2022-0515 Cross-Site Request Forgery (CSRF) in crater-invoice/crater

Cross-Site Request Forgery CSRF in GitHub repository crater-invoice/crater prior to 6.0.4...

CVE-2022-0514 Business Logic Errors in crater-invoice/crater

Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5...

Crater Invoice Crater 跨站请求伪造漏洞

Crater Invoice Crater is an open source web and mobile application from Crater Invoice, Inc. for tracking expenses, payments and creating professional invoices and estimates. A cross-site request forgery vulnerability existed in Crater Invoice Crater prior to 6.0.4, no information about this...

Sourcecodester Simple Client Management System SQL注入漏洞

Sourcecodester Simple Client Management System is a simple web-based application that provides an online platform to manage company customer invoices. sourcecodester Simple Client Management System is vulnerable to SQL injection vulnerability, which stems from the application's lack of validation...

Cross-site Scripting in Crater Invoice

Crater invoice prior to version 6.0.0 has a cross-site scripting vulnerability...

GHSA-6VFW-74WR-3CHH Cross-site Scripting in Crater Invoice

Crater invoice prior to version 6.0.0 has a cross-site scripting vulnerability...

CVE-2022-0372 Cross-site Scripting (XSS) - Stored in crater-invoice/crater

Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...

Cross-Site Request Forgery (CSRF) in crater-invoice/crater

Description An attacker is able to log out a user if a logged-in user visits the attacker's website. Proof of Concept history.pushState'', '', '/' document.forms0.submit; Impact This vulnerability is capable of forging users to unintentional logout. More details One way GET could be abused here i...

GHSA-XH9G-CP3V-P8Q4 Missing Authorization in Crater Invoice

Crater Invoice prior to version 6.0.2 has a missing authorization vulnerability...

Missing Authorization in Crater Invoice

Crater Invoice prior to version 6.0.2 has a missing authorization vulnerability...

CVE-2022-0203

Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2...

Improper access control

Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2...

CVE-2022-0203 Improper Access Control in crater-invoice/crater

Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2...

Crater Invoice crater 安全漏洞

Crater Invoice Crater is an open source web and mobile application from Crater Invoice, Inc. for tracking expenses, payments and creating professional invoices and estimates. Crater Invoice crater has a security vulnerability that stems from improper access control in the GitHub repository prior ...