CVE-2024-42580

A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletemedia.php component not adequately verifying that a request comes from a trust...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System version v2.0, which stems from a failure of the categorie.php component to adequately validate whether a reques...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletegroup.php component not adequately verifying that a request comes from a trust...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editgroup.php component not adequately verifying that a request comes from a trusted...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editcategorie.php component not adequately verifying that a request comes from a...

CVE-2024-42580

CVE-2024-42580 describes a Cross-Site Request Forgery in the Warehouse Inventory System v2.0, specifically in the edit_group.php component, enabling privilege escalation. The vulnerability stems from inadequate CSRF protection on requests to edit_group.php, with impacts limited to the affected co...

PT-2024-30040 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the add group.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disablin...

CVE-2024-42581

A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42583

A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

PT-2024-30038 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF in the component add product.php of Warehouse Inventory System allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System...

CVE-2024-42580

A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42586

A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42584

A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42586

The Warehouse Inventory System v2.0 is vulnerable to a Cross-Site Request Forgery (CSRF) in the categorie.php component. The root cause is a failure to adequately validate whether incoming requests originate from a trusted user. An attacker can exploit this to spoof malicious requests, tricking a...

CVE-2024-42581

A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42577

CVE-2024-42577 describes a Cross-Site Request Forgery in Warehouse Inventory System v2.0, specifically the add_product.php component, which can lead to privilege escalation. Red Hat and CNVD entries reiterate that the issue stems from insufficient checks on request origin/verification, enabling a...

CVE-2024-42579

CVE-2024-42579 is a CSRF vulnerability in the Warehouse Inventory System v2.0, specifically in the add_group.php component, as described across multiple sources. The underlying issue is that requests from untrusted sources may be coerced to perform privileged actions, enabling privilege escalatio...

PT-2024-30042 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit group.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disabli...

CVE-2024-42583

CVE-2024-42583 affects Warehouse Inventory System v2.0 in the delete_user.php component. A Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to escalate privileges by spoofing a request to delete or act on users. The root cause is inadequate verification that requests originate f...