Mayurik

Inventory Management System

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-46449

Exploit
  • EPSS 0.25%
  • Veröffentlicht 26.10.2023 15:15:09
  • Zuletzt bearbeitet 21.11.2024 08:28:32

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.

5.4

CVE-2023-46450

Exploit
  • EPSS 0.12%
  • Veröffentlicht 26.10.2023 15:15:09
  • Zuletzt bearbeitet 21.11.2024 08:28:32

Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier function.

9.8

CVE-2023-4749

Exploit
  • EPSS 0.06%
  • Veröffentlicht 04.09.2023 01:15:07
  • Zuletzt bearbeitet 21.11.2024 08:35:53

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to la...

9.8

CVE-2023-4201

Exploit
  • EPSS 0.05%
  • Veröffentlicht 07.08.2023 20:15:10
  • Zuletzt bearbeitet 21.11.2024 08:34:36

A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file ex_catagory_data.php. The manipulation of the argument columns[1][data] leads to sql inject...

9.8

CVE-2023-4200

Exploit
  • EPSS 0.05%
  • Veröffentlicht 07.08.2023 19:15:12
  • Zuletzt bearbeitet 21.11.2024 08:34:36

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file product_data.php.. The manipulation of the argument columns[1][data] leads to sql injecti...

7.5

CVE-2023-4199

Exploit
  • EPSS 0.05%
  • Veröffentlicht 07.08.2023 18:15:10
  • Zuletzt bearbeitet 21.11.2024 08:34:36

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file catagory_data.php. The manipulation of the argument columns[1][data] leads to sql injection. It i...