Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/03/28 4:56 a.m.•14 views

CVE-2026-30568

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in in the viewpurchase.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

4.8CVSS6AI score0.00297EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/27 12:00 a.m.•19 views

SourceCodester Inventory System 安全漏洞

The SourceCodester Inventory System is an open-source inventory system developed by SourceCodester. Version 1.0 of the SourceCodester Inventory System contains a security vulnerability. This vulnerability stems from the improper cleanup of the limit parameter in the viewpurchase.php file, which m...

4.8CVSS5.6AI score0.00297EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/27 12:00 a.m.•38 views

CVE-2026-30568

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in in the viewpurchase.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

0.00297EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/27 12:00 a.m.•14 views

PT-2026-28409

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Inventory System 1.0 in in the view purchase.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

4.8CVSS6AI score0.00297EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/27 12:00 a.m.•8 views

CVE-2026-30568

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0 in in the viewpurchase.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

6AI score0.00297EPSS
SaveExploits1References1
Rows per page
Query Builder