Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Inventory Management System ProjectInventory Management System1.0

14 matches found

CVE
CVE•added 2023/08/20 10:15 p.m.•138 views

CVE-2023-4437

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack r...

9.8CVSS8.3AI score0.00057EPSS
CVE
CVE•added 2023/08/27 7:15 a.m.•121 views

CVE-2023-4555

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file suppliar_data.php. The manipulation of the argument name/company leads to cross site scripting. The attack can be la...

6.1CVSS4.5AI score0.00058EPSS
CVE
CVE•added 2023/02/10 4:15 p.m.•113 views

CVE-2023-24232

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter.

4.8CVSS4.9AI score0.00063EPSS
CVE
CVE•added 2023/08/27 11:15 p.m.•49 views

CVE-2023-4558

A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staff_data.php. The manipulation of the argument columns[0][data] leads to sql injection. The attack can be launched remotely. T...

9.8CVSS8.4AI score0.00057EPSS
CVE
CVE•added 2023/08/20 11:15 p.m.•48 views

CVE-2023-4438

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/ajax/search_sales_report.php. The manipulation of the argument customer leads to sql injection. The attack can be l...

9.8CVSS8.4AI score0.00053EPSS
CVE
CVE•added 2023/08/06 11:15 a.m.•44 views

CVE-2023-4183

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit_update.php of the component Password Handler. The manipulation of the argument user_id leads to improper access controls. The atta...

9.8CVSS7.1AI score0.00054EPSS
CVE
CVE•added 2023/08/20 10:15 p.m.•41 views

CVE-2023-4436

A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0. This issue affects some unknown processing of the file app/action/edit_update.php. The manipulation of the argument user_id leads to sql injection. The attack may be initiated remote...

9.8CVSS8.3AI score0.00053EPSS
CVE
CVE•added 2023/08/21 2:15 a.m.•41 views

CVE-2023-4449

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php?page=member. The manipulation of the argument columns[0][data] leads to sql injection. It is possible to launc...

8.8CVSS7.8AI score0.00053EPSS
CVE
CVE•added 2023/08/06 12:15 p.m.•40 views

CVE-2023-4184

A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sell_return.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The associated identifie...

9.8CVSS8.8AI score0.00045EPSS
CVE
CVE•added 2023/08/06 10:15 a.m.•39 views

CVE-2023-4182

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file edit_sell.php. The manipulation of the argument up_pid leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-...

9.8CVSS8.8AI score0.00048EPSS
CVE
CVE•added 2023/08/27 11:15 p.m.•39 views

CVE-2023-4557

A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_purchase_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack remo...

9.8CVSS8.3AI score0.00053EPSS
CVE
CVE•added 2023/02/10 4:15 p.m.•36 views

CVE-2023-24231

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Categories Name parameter.

4.8CVSS4.9AI score0.00063EPSS
CVE
CVE•added 2023/02/10 4:15 p.m.•35 views

CVE-2023-24234

A stored cross-site scripting (XSS) vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter.

4.8CVSS4.9AI score0.00068EPSS
CVE
CVE•added 2023/02/10 4:15 p.m.•32 views

CVE-2023-24233

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Client Name parameter.

4.8CVSS4.9AI score0.00068EPSS