PT-2026-23990

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A flaw exists in SourceCodester Sales and Inventory System 1.0 that allows for SQL injection. This issue is located within the check supplier details.php file and involves the...

EUVD-2026-10258

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /checkcustomerdetails.php of the component POST Handler. Executing a manipulation of the argument stockname1 can lead to sql injection. The attack can be launched remotely...

PT-2026-23966

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in SourceCodester Sales and Inventory System 1.0. The issue is located in the POST Handler component, specifically within the file /check customer...

CVE-2022-41028: Buffer Copy without Checking Size of Input

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2021-36121

An issue was discovered in Echo ShareCare 8.15.5. The file-upload feature in Access/DownloadFeedMnt/FileUploadUpd.cfm is susceptible to an unrestricted upload vulnerability via the name1 parameter, when processing remote input from an authenticated user, leading to the ability for arbitrary files...

Echo ShareCare 代码问题漏洞

ShareCare is a clinical and financial software system from Echo Group. A security vulnerability exists in Echo ShareCare version 8.15.5, which stems from the file upload functionality in "Access/DownloadFeedMnt/FileUploadUpd.cfm" that is susceptible to an unrestricted upload vulnerability via the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in add.php in HIOX Guest Book HGB 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name1, 2 email, or 3 cmt parameter...

CVE-2014-1620: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in add.php in HIOX Guest Book HGB 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name1, 2 email, or 3 cmt parameter...

PT-2014-4262

Name of the Vulnerable Software and Affected Versions HIOX Guest Book HGB version 5.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name1, email, or cmt parameters in the add.php file. This can lead to cross-site scripting XSS attacks. Recommendation...