6 matches found
PT-2026-23990
Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A flaw exists in SourceCodester Sales and Inventory System 1.0 that allows for SQL injection. This issue is located within the check supplier details.php file and involves the...
EUVD-2026-10258
A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /checkcustomerdetails.php of the component POST Handler. Executing a manipulation of the argument stockname1 can lead to sql injection. The attack can be launched remotely...
PT-2026-23966
Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in SourceCodester Sales and Inventory System 1.0. The issue is located in the POST Handler component, specifically within the file /check customer...
CVE-2021-36121
An issue was discovered in Echo ShareCare 8.15.5. The file-upload feature in Access/DownloadFeedMnt/FileUploadUpd.cfm is susceptible to an unrestricted upload vulnerability via the name1 parameter, when processing remote input from an authenticated user, leading to the ability for arbitrary files...
Echo ShareCare 代码问题漏洞
ShareCare is a clinical and financial software system from Echo Group. A security vulnerability exists in Echo ShareCare version 8.15.5, which stems from the file upload functionality in "Access/DownloadFeedMnt/FileUploadUpd.cfm" that is susceptible to an unrestricted upload vulnerability via the...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in add.php in HIOX Guest Book HGB 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name1, 2 email, or 3 cmt parameter...