Lucene search
K

7 matches found

EUVD
EUVD
added 2026/03/27 6:31 p.m.5 views

EUVD-2026-16707

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtqty" parameter during stock entry, allowing negative values to be processed. This causes the system to decrease the inventory level...

7.5CVSS5.8AI score0.00421EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.4 views

PT-2026-22786

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage stock.php...

6AI score0.00284EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/01/26 12:0 a.m.4 views

Cups Easy 跨站脚本漏洞

Cups Easy is a PHP-based purchasing and inventory software that may become a full-fledged ERP in the future. Cups Easy suffers from a cross-site scripting vulnerability that stems from insufficient escaping of the batchno parameter on the /cupseasylive/stock.php page. An attacker could use this...

8.2CVSS7AI score0.00489EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/26 12:0 a.m.4 views

Cups Easy 跨站脚本漏洞

Cups Easy is a PHP-based purchasing and inventory software that may become a full-fledged ERP in the future. Cups Easy suffers from a cross-site scripting vulnerability that stems from insufficient escaping of the batchno parameter on the /cupseasylive/stockissuancelinecreate.php page. An attacke...

8.2CVSS7AI score0.00437EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/07/05 8:15 p.m.2 views

CVE-2022-32311

Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/viewstock.php...

9.8CVSS5.7AI score0.01424EPSS
Exploits1References2
OSV
OSV
added 2022/07/05 8:15 p.m.6 views

CVE-2022-32311

Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/viewstock.php...

9.8CVSS5.8AI score0.01424EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/07/05 12:0 a.m.4 views

Stock Management System SQL注入漏洞

Stock Management System is an inventory management system. A SQL injection vulnerability exists in Stock Management System v1.0, which originates from a lack of validation of the id parameter in /isms/admin/stocks/viewstock.php against an externally entered SQL statement. An attacker can exploit...

9.8CVSS6.1AI score0.01424EPSS
Exploits1References2
Rows per page
Query Builder