Lucene search

Stock Management System Security Vulnerabilities - 2020

cve

CVE-2020-23830

A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site.

7.1CVSS

6.9AI Score

0.002EPSS

2020-09-02 05:15 PM

cve

CVE-2020-23831

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials.

6.4CVSS

6.1AI Score

0.002EPSS

2020-09-01 05:15 PM

cve

CVE-2020-24197

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter.

9.8CVSS

9.9AI Score

0.002EPSS

2020-09-09 02:15 PM

cve

CVE-2020-24198

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'

6.1CVSS

6AI Score

0.001EPSS

2020-09-09 03:15 PM