Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2026/03/31 4:59 a.m.3 views

CVE-2026-30564

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.00057EPSS
Exploits1References1
NVD
NVD
added 2026/03/30 3:16 p.m.2 views

CVE-2026-30564

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS0.00057EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/30 12:0 a.m.1 views

CVE-2026-30564

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6AI score0.00057EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/03/30 12:0 a.m.18 views

CVE-2026-30564

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

0.00057EPSS
Exploits1References1
CVE
CVE
added 2026/03/30 12:0 a.m.4 views

CVE-2026-30564

CVE-2026-30564 describes a Reflected Cross-Site Scripting (XSS) in SourceCodester Sales and Inventory System 1.0, specifically in the view_payments.php file via the input parameter “limit.” The vulnerability stems from insufficient sanitization of the input, allowing a remote attacker to craft a ...

6.1CVSS6AI score0.00057EPSS
Exploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/30 12:0 a.m.0 views

CVE-2026-30564

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.00057EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.2 views

SourceCodester Sales and Inventory System 安全漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a security vulnerability. This vulnerability stems from improper cleaning of the parameter limit...

6.1CVSS5.6AI score0.00057EPSS
Exploits1References2
EUVD
EUVD
added 2026/03/30 12:0 a.m.1 views

EUVD-2026-17103

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewpayments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or...

6.1CVSS6AI score0.00057EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.3 views

CVE-2026-4571

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpayments.php of the component HTTP POST Request Handler. Performing a manipulation of the argument searchtxt results in sql injection...

6.5CVSS6.5AI score0.00035EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/23 6:30 a.m.1 views

EUVD-2026-14356

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpayments.php of the component HTTP POST Request Handler. Performing a manipulation of the argument searchtxt results in sql injection...

6.5CVSS5.7AI score0.00035EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/03/23 3:41 a.m.1 views

CVE-2026-4571 SourceCodester Sales and Inventory System HTTP POST Request view_payments.php sql injection

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpayments.php of the component HTTP POST Request Handler. Performing a manipulation of the argument searchtxt results in sql injection...

6.5CVSS5.7AI score0.00035EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/23 3:41 a.m.29 views

CVE-2026-4571 SourceCodester Sales and Inventory System HTTP POST Request view_payments.php sql injection

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpayments.php of the component HTTP POST Request Handler. Performing a manipulation of the argument searchtxt results in sql injection...

6.5CVSS0.00035EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/23 3:41 a.m.2 views

CVE-2026-4571

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpayments.php of the component HTTP POST Request Handler. Performing a manipulation of the argument searchtxt results in sql injection...

6.5CVSS6.5AI score0.00035EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2026/03/23 12:0 a.m.3 views

SourceCodester Sales and Inventory System SQL注入漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the searchtxt...

6.5CVSS6.7AI score0.00035EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.2 views

PT-2026-27044

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A security flaw exists in SourceCodester Sales and Inventory System 1.0. The issue is related to SQL injection within the HTTP POST Request Handler functionality, specifically i...

6.5CVSS6.6AI score0.00035EPSS
Exploits1References8
Rows per page
Query Builder