793 matches found
Warehouse Inventory System 安全漏洞
Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletegroup.php component not adequately verifying that a request comes from a trust...
CVE-2024-42586
A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42581
A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42580
A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42584
A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42586
Summary: CVE-2024-42586 affects Warehouse Inventory System v2.0, specifically the categorie.php component, where a CSRF vulnerability allows privilege escalation. The CNVD entry notes the issue stems from insufficient validation of requests from trusted users. PT-2024-30048 suggests a mitigation:...
PT-2024-30040 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the add group.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disablin...
CVE-2024-42576
A Cross-Site Request Forgery CSRF in the component editcategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
CVE-2024-42576
CVE-2024-42576 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Warehouse Inventory System v2.0. The flaw is in the component edit_categorie.php , where insufficient request validation allows an attacker to provoke privileged actions, enabling privilege escalation. Affected prod...
CVE-2024-42582
A Cross-Site Request Forgery CSRF in the component deletecategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
PT-2024-30043 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete group.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...
PT-2024-30042 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit group.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disabli...
CVE-2024-42584
CVE-2024-42584 affects Warehouse Inventory System v2.0, specifically the delete_product.php component. The CSRF vulnerability allows an unauthenticated attacker to induce a victim to perform privileged actions, enabling privilege escalation. Root cause is insufficient verification of request orig...
CVE-2024-42586
A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...
PT-2024-30046 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete product.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...
CVE-2024-42578
The data describes a Cross-Site Request Forgery (CSRF) in the Warehouse Inventory System v2.0, specifically in the edit_product.php component, which can allow privilege escalation. Affected product/version is Warehouse Inventory System v2.0; root cause is CSRF due to insufficient verification of ...
CVE-2024-42577
CVE-2024-42577 describes a Cross-Site Request Forgery in Warehouse Inventory System v2.0, specifically the add_product.php component, which can lead to privilege escalation. Red Hat and CNVD entries reiterate that the issue stems from insufficient checks on request origin/verification, enabling a...
CVE-2024-42583
CVE-2024-42583 affects Warehouse Inventory System v2.0 in the delete_user.php component. A Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to escalate privileges by spoofing a request to delete or act on users. The root cause is inadequate verification that requests originate f...
CVE-2024-42582
CVE-2024-42582 describes a Cross-Site Request Forgery (CSRF) in the Warehouse Inventory System v2.0, specifically in the delete_categorie.php component. The vulnerability enables privilege escalation and is consistently reported across sources, with Red Hat and CNVD notes reinforcing that request...