CVE-2024-42585

A Cross-Site Request Forgery CSRF in the component deletemedia.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42583

A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42577

A Cross-Site Request Forgery CSRF in the component addproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42576

A Cross-Site Request Forgery CSRF in the component editcategorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42581: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42586: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42583: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42582

CVE-2024-42582 describes a Cross-Site Request Forgery (CSRF) in the Warehouse Inventory System v2.0, specifically in the delete_categorie.php component. The vulnerability enables privilege escalation and is consistently reported across sources, with Red Hat and CNVD notes reinforcing that request...

CVE-2024-42586

A Cross-Site Request Forgery CSRF in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42579

CVE-2024-42579 is a CSRF vulnerability in the Warehouse Inventory System v2.0, specifically in the add_group.php component, as described across multiple sources. The underlying issue is that requests from untrusted sources may be coerced to perform privileged actions, enabling privilege escalatio...

CVE-2024-42578

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Warehouse Inventory System v2.0 within the edit_product.php component. The flaw stems from the component's failure to adequately verify that requests originate from a trusted user. An attacker can exploit this by spoofing a malicious...

CVE-2024-42576

The Warehouse Inventory System v2.0 is vulnerable to a Cross-Site Request Forgery (CSRF) in the edit_categorie.php component. The root cause is the component's failure to adequately verify that requests originate from a trusted user, which allows an attacker to spoof a malicious request. This can...

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the editproduct.php component not adequately verifying that a request comes from a trust...

CVE-2024-42584

CVE-2024-42584 affects Warehouse Inventory System v2.0, specifically the delete_product.php component. The CSRF vulnerability allows an unauthenticated attacker to induce a victim to perform privileged actions, enabling privilege escalation. Root cause is insufficient verification of request orig...

PT-2024-30046 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete product.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...

CVE-2024-42584: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component deleteproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42580: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component editgroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

PT-2024-30042 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit group.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disabli...

CVE-2024-42581

A Cross-Site Request Forgery CSRF in the component deletegroup.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

CVE-2024-42577

CVE-2024-42577 describes a Cross-Site Request Forgery in Warehouse Inventory System v2.0, specifically the add_product.php component, which can lead to privilege escalation. Red Hat and CNVD entries reiterate that the issue stems from insufficient checks on request origin/verification, enabling a...