Lucene search
K

9 matches found

OSV
OSV
added 2026/01/15 4:16 p.m.1 views

CVE-2021-47769

Isshue Shopping Cart 3.5 contains a persistent cross-site scripting vulnerability in title input fields across stock, customer, and invoice modules. Attackers with privileged user accounts can inject malicious scripts that execute on preview, potentially enabling session hijacking and persistent...

4.8CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2026/01/15 4:16 p.m.1 views

CVE-2021-47769

Isshue Shopping Cart 3.5 contains a persistent cross-site scripting vulnerability in title input fields across stock, customer, and invoice modules. Attackers with privileged user accounts can inject malicious scripts that execute on preview, potentially enabling session hijacking and persistent...

5.1CVSS0.00014EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/01/15 3:52 p.m.25 views

CVE-2021-47769 Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)

Isshue Shopping Cart 3.5 contains a persistent cross-site scripting vulnerability in title input fields across stock, customer, and invoice modules. Attackers with privileged user accounts can inject malicious scripts that execute on preview, potentially enabling session hijacking and persistent...

5.1CVSS0.00014EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.2 views

PT-2026-3045

Name of the Vulnerable Software and Affected Versions Isshue Shopping Cart version 3.5 Description The software contains a persistent cross-site scripting issue in title input fields within the stock, customer, and invoice modules. An attacker with elevated privileges can inject malicious scripts...

7.2CVSS5AI score0.00014EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-4690

Malware in sbrugna...

4.3CVSS6.4AI score0.00231EPSS
Exploits0References4
OSV
OSV
added 2025/08/30 2:15 p.m.0 views

CVE-2025-9690

A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

8.8CVSS5.8AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/08/30 1:32 p.m.2 views

CVE-2025-9690 SourceCodester Advanced School Management System vendordetails sql injection

A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

6.5CVSS6.8AI score0.00071EPSS
Exploits1References4
Fedora
Fedora
added 2016/09/13 6:29 p.m.24 views

[SECURITY] Fedora 25 Update: trytond-stock-4.0.3-1.fc25

stock module for Tryton application server...

5.3CVSS2AI score0.00184EPSS
Exploits0
Drupal
Drupal
added 2008/09/24 12:0 a.m.8 views

SA-2008-055 - Stock - Cross site scripting

The stock module provides the ability to query price quotes and trading volumes from various stock markets. An oversight in the menu permissions code allows any user to change the text of the heading at the top of the stock quotes page. As this text is not escaped, it is safe only for an...

6AI score
Exploits0References5
Rows per page
Query Builder