5 matches found
PT-2024-20164
Name of the Vulnerable Software and Affected Versions Cups Easy Purchase & Inventory version 1.0 Description A vulnerability has been reported in Cups Easy Purchase & Inventory whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via...
CVE-2024-23891: Improper Neutralization of Input During Web Page Generation
A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter. Exploitation of this vulnerability could...
PT-2024-20131
Name of the Vulnerable Software and Affected Versions Cups Easy Purchase & Inventory version 1.0 Description A vulnerability has been reported in Cups Easy Purchase & Inventory whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via...
CVE-2024-23869: Improper Neutralization of Input During Web Page Generation
A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stockissuanceprint.php, in the issuanceno parameter. Exploitation of this...
PT-2024-20135
Name of the Vulnerable Software and Affected Versions Cups Easy Purchase & Inventory version 1.0 Description A vulnerability has been reported in Cups Easy Purchase & Inventory whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via...