Lucene search
+L

135 matches found

NVD
NVD
added 2026/03/08 5:16 p.m.6 views

CVE-2026-3753

A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /addsalesprint.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

8.8CVSS0.00301EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/08 5:2 p.m.3 views

CVE-2026-3753

A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /addsalesprint.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS5.7AI score0.00301EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.7 views

SourceCodester Sales and Inventory System SQL注入漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory system developed by SourceCodester. Versions of the SourceCodester Sales and Inventory System prior to version 1.0 contained a SQL injection vulnerability. This vulnerability stemmed from incorrect handling of the...

8.8CVSS6.7AI score0.00301EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.7 views

PT-2026-23965

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in SourceCodester Sales and Inventory System 1.0. The issue is located in an unknown function within the /add stock.php file. Manipulating the cost...

8.8CVSS6.5AI score0.00301EPSS
SaveExploits1References10
EUVD
EUVD
added 2025/10/27 4:2 p.m.7 views

EUVD-2025-36217

A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might b...

7.5CVSS6.8AI score0.00387EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.13 views

EUVD-2023-23555

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00763EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2023-23557

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00763EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2023-24163

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00737EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 2:53 a.m.12 views

CVE-2023-1292

A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vulnerability affects the function deleteclient of the file classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS7.4AI score0.00763EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:33 a.m.8 views

CVE-2023-1290

A vulnerability, which was classified as critical, has been found in SourceCodester Sales Tracker Management System 1.0. Affected by this issue is some unknown functionality of the file admin/clients/viewclient.php. The manipulation of the argument id leads to sql injection. The attack may be...

9.8CVSS8AI score0.00763EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:32 a.m.9 views

CVE-2023-1291

A vulnerability, which was classified as critical, was found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/clients/manageclient.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS7.9AI score0.00763EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:36 p.m.8 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

9.8CVSS8.6AI score0.01517EPSS
SaveExploits1References1
OSV
OSV
added 2023/06/09 1:15 p.m.8 views

CVE-2023-3184

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross sit...

4.8CVSS3.8AI score0.02264EPSS
SaveExploits4References4
Prion
Prion
added 2023/06/09 1:15 p.m.19 views

Cross site scripting

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross sit...

3.3CVSS4.8AI score0.02264EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
added 2023/06/09 1:0 p.m.60 views

CVE-2023-3184 SourceCodester Sales Tracker Management System cross site scripting

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross sit...

3.3CVSS5.1AI score0.02264EPSS
SaveExploits4References4
OSV
OSV
added 2023/04/11 5:15 p.m.6 views

CVE-2023-1983

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

9.8CVSS6.6AI score0.00737EPSS
SaveExploits1References3
NVD
NVD
added 2023/04/11 5:15 p.m.20 views

CVE-2023-1983

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

9.8CVSS7.3AI score0.00737EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/11 5:15 p.m.20 views

Sql injection

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

6.5CVSS9.5AI score0.00737EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.10 views

PT-2023-17390 · Sourcecodester · Sourcecodester Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sales Tracker Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/products/manage product.php, specifically the component GET Parameter Handler. The manipulation of...

9.8CVSS6.9AI score0.00737EPSS
SaveExploits1References6
NVD
NVD
added 2023/03/09 3:15 p.m.23 views

CVE-2023-1292

A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vulnerability affects the function deleteclient of the file classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS7.4AI score0.00763EPSS
SaveExploits1References3
Rows per page
Query Builder