Lucene search
K

17 matches found

EUVD
EUVD
added 2026/03/30 6:31 p.m.2 views

EUVD-2026-17099

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addsupplier.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00021EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/30 12:0 a.m.1 views

CVE-2026-30565

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewsupplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6AI score0.00066EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.1 views

CVE-2026-4568

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /updatesupplier.php of the component HTTP GET Request Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit h...

6.5CVSS6.4AI score0.00015EPSS
Exploits1References1
NVD
NVD
added 2026/03/24 10:16 p.m.4 views

CVE-2026-4777

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file viewsupplier.php of the component POST Parameter Handler. The manipulation of the argument searchtxt results in sql injection. The attack may be launched remotely. The...

6.5CVSS0.00035EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/23 2:12 a.m.30 views

CVE-2026-4568 SourceCodester Sales and Inventory System HTTP GET Request update_supplier.php sql injection

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /updatesupplier.php of the component HTTP GET Request Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit h...

6.5CVSS0.00015EPSS
Exploits1References5
CVE
CVE
added 2026/03/03 12:0 a.m.7 views

CVE-2026-26887

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_supplier.php. Multiple connected sources (Red Hat, NVD, CVE listing, ATT&CK not specified) confirm this vulnerability; no concrete exploit details or patches are provided in the supplied documents...

2.7CVSS6AI score0.00011EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2026/03/02 12:0 a.m.2 views

Pharmacy Point Of Sale System 安全漏洞

The Pharmacy Point of Sale System is a web-based application developed by Carlo Montero. It is used to help a pharmacy manage its sales transactions. Version 1.0 of the Pharmacy Point of Sale System has a security vulnerability, which stems from an SQL injection vulnerability in the...

9.8CVSS5.8AI score0.00018EPSS
Exploits1References2
EUVD
EUVD
added 2025/12/14 9:30 a.m.3 views

EUVD-2025-203287

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

7.5CVSS6.6AI score0.00028EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/14 7:32 a.m.1 views

CVE-2025-14649 itsourcecode Online Cake Ordering System supplier.php sql injection

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

7.5CVSS6.8AI score0.00028EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/14 7:32 a.m.18 views

CVE-2025-14649 itsourcecode Online Cake Ordering System supplier.php sql injection

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

7.5CVSS0.00028EPSS
Exploits1References5
OSV
OSV
added 2025/04/20 1:15 p.m.1 views

CVE-2025-3826

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsuppliername/txtaddress leads to cross site scripting. It is possible ...

4.1CVSS4AI score
Exploits0References4
OSV
OSV
added 2024/10/19 3:15 p.m.1 views

CVE-2024-10140

A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. Affected by this issue is some unknown functionality of the file /managesupplier.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

9.8CVSS5.7AI score0.23494EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.2 views

PT-2024-26914 · Sourcecodester · Sourcecodester Warehouse Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Warehouse Management System version 1.0 Description: A problematic issue was found in the SourceCodester Warehouse Management System, affecting some unknown functionality of the file supplier.php. The manipulation of the...

5.4CVSS4.2AI score0.00091EPSS
Exploits1References6
OSV
OSV
added 2024/02/07 2:15 a.m.1 views

CVE-2024-1269

A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /supplier.php. The manipulation of the argument suppliername/suppliercontact leads to cross site scripting. The attack can be initiated...

6.1CVSS3.8AI score0.00323EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/02/06 12:0 a.m.4 views

PT-2024-17715 · Unknown · Sourcecodester Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Product Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Product Management System, classified as problematic. This issue affects unknown code of the file /supplier.php. The...

6.1CVSS4.3AI score0.00323EPSS
Exploits1References8
CNNVD
CNNVD
added 2023/05/19 12:0 a.m.2 views

SourceCodester Online Jewelry Store SQL注入漏洞

Online Jewelry Store is an online jewelry store by janobe individual developers. A SQL injection vulnerability exists in SourceCodester Online Jewelry Store version 1.0 due to unknown functionality in the file supplier.php in the component's POST parameter handler, which results in an sql injecti...

9.8CVSS7.1AI score0.00297EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/05/19 12:0 a.m.3 views

PT-2023-21595 · Sourcecodester · Sourcecodester Online Jewelry Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Jewelry Store version 1.0 Description: A critical issue was found in the file supplier.php of the component POST Parameter Handler, where the manipulation of the suppid argument leads to sql injection. The attack can be...

9.8CVSS7.5AI score0.00297EPSS
Exploits1References5
Rows per page
Query Builder