Show filters
41 Total Results
Displaying 11-20 of 41
Sort by:
Attacker Value
Unknown
CVE-2023-39714
Disclosure Date: September 01, 2023 (last updated October 08, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section.
0
Attacker Value
Unknown
CVE-2023-39710
Disclosure Date: September 01, 2023 (last updated October 08, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section.
0
Attacker Value
Unknown
CVE-2023-39709
Disclosure Date: August 28, 2023 (last updated October 08, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Member section.
0
Attacker Value
Unknown
CVE-2023-39708
Disclosure Date: August 28, 2023 (last updated October 08, 2023)
A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section.
0
Attacker Value
Unknown
CVE-2023-39707
Disclosure Date: August 25, 2023 (last updated October 08, 2023)
A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section.
0
Attacker Value
Unknown
CVE-2022-42218
Disclosure Date: October 18, 2022 (last updated October 08, 2023)
Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield/manage_loan.php.
0
Attacker Value
Unknown
CVE-2022-42143
Disclosure Date: October 17, 2022 (last updated October 08, 2023)
Open Source SACCO Management System v1.0 is vulnerable to SQL Injection via /sacco_shield/manage_payment.php.
0
Attacker Value
Unknown
CVE-2022-41536
Disclosure Date: October 14, 2022 (last updated October 08, 2023)
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_user.php.
0
Attacker Value
Unknown
CVE-2022-41535
Disclosure Date: October 14, 2022 (last updated October 08, 2023)
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_borrower.php.
0
Attacker Value
Unknown
CVE-2022-41532
Disclosure Date: October 12, 2022 (last updated October 08, 2023)
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_plan.
0
