Warehouse Management System 安全漏洞

Warehouse Management System is a warehouse management system by Carlo Montero Personal Developer. A security vulnerability exists in Warehouse Management System version v2.20.9.1, which stems from a reused token value in the zeqp system, resulting in incorrect access control...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the redirect parameter in Commerce Catalogs. An attacker can perform administrative actions, execute arbitrary code, and alter user settings by convincing a user to follow a malicious link. Remediatio...

Anteeo WMS 安全漏洞

Anteeo WMS is a fully functional data center from Anteeo WMS, Inc. A security vulnerability exists in Anteeo WMS versions prior to 4.7.34, which stems from the presence of a SQL injection vulnerability that allows an unauthenticated attacker to execute arbitrary SQL commands via username paramete...

CVE-2024-44113

Due to missing authorization checks, SAP Business Warehouse BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the...

CVE-2024-44113 Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer)

Due to missing authorization checks, SAP Business Warehouse BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the...

CVE-2024-44113 Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer)

Due to missing authorization checks, SAP Business Warehouse BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the...

CVE-2024-44113

The CVE-2024-44113 entry concerns SAP Business Warehouse (BEx Analyzer) with missing authorization checks that allow an authenticated attacker to enumerate information over the network, yielding a limited confidentiality impact. Affected software is SAP Business Warehouse via the BEx Analyzer com...

SAP Business Warehouse 安全漏洞

SAP Business Warehouse is a key component for executing business processes from SAP, Germany, that allows users to design, implement, and manage business processes, ensure process compliance, and reduce the need for manual operations through automation. A security vulnerability exists in SAP...

PT-2024-30956 · Sap · Sap Business Warehouse

Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse BEx Analyzer affected versions not specified Description: The issue is related to missing authorization checks in SAP Business Warehouse BEx Analyzer, allowing an authenticated attacker to access restricted information...

CVE-2024-45444

Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38214)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletemedia.php component not adequately verifying that a request comes from a trust...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38209)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addgroup.php component not adequately verifying that a request comes from a trusted...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38210)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addproduct.php component not adequately verifying that a request comes from a truste...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38212)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletecategorie.php component not adequately verifying that a request comes from a...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38217)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editcategorie.php component not adequately verifying that a request comes from a...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38216)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteuser.php component not adequately verifying that a request comes from a truste...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38218)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editgroup.php component not adequately verifying that a request comes from a trusted...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38211)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System version v2.0, which stems from a failure of the categorie.php component to adequately validate whether a reques...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38215)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteproduct.php component not adequately verifying that a request comes from a...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38213)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletegroup.php component not adequately verifying that a request comes from a trust...