Lucene search
+L

45659 matches found

CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•25 views

SourceCodester Sales and Inventory System Security Vulnerabilities

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the msg parameter i...

6.1CVSS5.5AI score0.00261EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/30 12:00 a.m.•11 views

CVE-2026-30556

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

6.2AI score0.00261EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•11 views

CVE-2026-30556

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

6AI score0.00261EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•26 views

PT-2026-29053

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

6AI score0.00261EPSS
SaveExploits1References2
CVE
CVE
•added 2026/03/30 12:00 a.m.•39 views

CVE-2026-30556

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 . The flaw is located in the index.php file due to the application's failure to properly sanitize the "msg" parameter. This allows a remote attacker to inject arbitrary web scripts or HTML...

6.1CVSS6.2AI score0.00261EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30558

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.2AI score0.00261EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•11 views

CVE-2026-30558

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00261EPSS
SaveExploits1References2
CVE
CVE
•added 2026/03/30 12:00 a.m.•45 views

CVE-2026-30558

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 . The flaw is located in the add_customer.php file due to improper sanitization of the msg parameter. This allows remote attackers to inject arbitrary web scripts or HTML through a crafted...

6.1CVSS6.2AI score0.00261EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2026/03/30 12:00 a.m.•45 views

CVE-2026-30558

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcustomer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

0.00261EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30557: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.1CVSS6AI score0.00261EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•29 views

SourceCodester Sales and Inventory System Security Vulnerabilities

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter msg i...

6.1CVSS5.5AI score0.00261EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30557

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6.2AI score0.00261EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•9 views

CVE-2026-30557

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00261EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30564: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.00213EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30565

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewsupplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.2AI score0.00213EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•25 views

SourceCodester Sales and Inventory System Security Vulnerabilities

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter limit...

6.1CVSS5.5AI score0.00213EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•11 views

CVE-2026-30565: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewsupplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.00213EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30566

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewcustomers.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script o...

6.1CVSS6AI score0.00213EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/03/30 12:00 a.m.•17 views

EUVD-2026-17103

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.00213EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/30 12:00 a.m.•10 views

CVE-2026-30564

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.00213EPSS
SaveExploits1References2
Rows per page
Query Builder