Lucene search
K

32 matches found

CNNVD
CNNVD
added 2026/05/05 12:0 a.m.5 views

Rajodiya ERPGo SaaS 安全漏洞

Rajodiya ERPGo SaaS is an online enterprise resource planning system provided by Rajodiya Corporation. Version 3.9 of Rajodiya ERPGo SaaS contains a security vulnerability. This vulnerability stems from a CSV injection flaw, allowing authenticated attackers to execute arbitrary code by injecting...

8.8CVSS6.2AI score0.00062EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/28 1:15 p.m.3 views

EUVD-2026-26051

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

4.8CVSS3AI score0.00035EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/28 1:15 p.m.2 views

CVE-2026-7281 SourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scripting

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function supplier of the file /index.php?page=supplier. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. Th...

4.8CVSS3AI score0.00035EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.3 views

CVE-2026-4472

A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admineditsupplier.php. The manipulation of the argument SupplierName leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS6.6AI score0.00044EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/20 6:31 a.m.1 views

EUVD-2026-13569

A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admineditsupplier.php. The manipulation of the argument SupplierName leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS5.8AI score0.00044EPSS
Exploits1References6
NVD
NVD
added 2026/03/20 5:16 a.m.0 views

CVE-2026-4472

A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admineditsupplier.php. The manipulation of the argument SupplierName leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00044EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/20 5:2 a.m.0 views

CVE-2026-4472

A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admineditsupplier.php. The manipulation of the argument SupplierName leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS5.8AI score0.00044EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/03/20 5:2 a.m.22 views

CVE-2026-4472 itsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injection

A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admineditsupplier.php. The manipulation of the argument SupplierName leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS0.00044EPSS
Exploits1References5
CVE
CVE
added 2026/03/20 5:2 a.m.5 views

CVE-2026-4472

CVE-2026-4472 affects the itsourcecode Online Frozen Foods Ordering System 1.0. The vulnerability is in the file "/admin/admin_edit_supplier.php" where manipulating the argument Supplier_Name enables a SQL Injection . Exploitation appears remote and the vulnerability has been publicly disclosed a...

9.8CVSS5.8AI score0.00044EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/03 12:26 a.m.6 views

CVE-2025-65215

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /productexpiry/add-supplier.php via the Supplier Name field...

6.1CVSS6.2AI score0.00033EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/02 6:30 p.m.3 views

EUVD-2025-200293

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /productexpiry/add-supplier.php via the Supplier Name field...

6.1CVSS5.6AI score0.00033EPSS
Exploits1References3
OSV
OSV
added 2025/12/02 6:15 p.m.3 views

CVE-2025-65215

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /productexpiry/add-supplier.php via the Supplier Name field...

6.1CVSS5.8AI score0.00033EPSS
Exploits1References2
NVD
NVD
added 2025/12/02 6:15 p.m.1 views

CVE-2025-65215

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /productexpiry/add-supplier.php via the Supplier Name field...

6.1CVSS0.00033EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.3 views

SourceCodester Web-based Pharmacy Product Management System 安全漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source web-based pharmacy product management system. A security vulnerability exists in Sourcecodester Web-based Pharmacy Product Management System v1.0, which originates from a cross-site scripting attack on the...

6.1CVSS6.1AI score0.00033EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/12/02 12:0 a.m.1 views

CVE-2025-65215

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /productexpiry/add-supplier.php via the Supplier Name field...

5.8AI score0.00033EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/12/02 12:0 a.m.6 views

CVE-2025-65215

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /productexpiry/add-supplier.php via the Supplier Name field...

0.00033EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.1 views

PT-2025-48737

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting XSS in /product expiry/add-supplier.php via the Supplier Name field...

6.1CVSS6.2AI score0.00033EPSS
Exploits1References3
CVE
CVE
added 2025/12/02 12:0 a.m.6 views

CVE-2025-65215

Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Supplier Name field of /product_expiry/add-supplier.php. The issue is documented across multiple feeds (NVD, Red Hat, ENISA, CNNVD, CVE lists) with consistent description. Root caus...

6.1CVSS5.8AI score0.00033EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2025/10/31 12:0 a.m.1 views

E-Commerce Website supplier_add.php file cross-site scripting vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters suppname and suppaddress in the file /pages/supplieradd.php, which can be exploite...

6.1CVSS6AI score0.00041EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 10:59 p.m.7 views

CVE-2025-12333

A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplieradd.php. The manipulation of the argument suppname/suppaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

6.1CVSS3.8AI score0.00041EPSS
Exploits1References1
Rows per page
Query Builder