Show filters
294 Total Results
Displaying 121-130 of 294
Sort by:
Attacker Value
Unknown
CVE-2023-24233
Disclosure Date: February 10, 2023 (last updated February 24, 2025)
A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Client Name parameter.
0
Attacker Value
Unknown
CVE-2023-24232
Disclosure Date: February 10, 2023 (last updated February 24, 2025)
A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter.
0
Attacker Value
Unknown
CVE-2023-24231
Disclosure Date: February 10, 2023 (last updated February 24, 2025)
A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Categories Name parameter.
0
Attacker Value
Unknown
CVE-2023-23014
Disclosure Date: January 20, 2023 (last updated February 24, 2025)
Cross Site Scripting (XSS) vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c (on Apr 23, 2021) via edit_store_name and edit_active inputs in file InventorySystem.php.
0
Attacker Value
Unknown
CVE-2022-38573
Disclosure Date: September 23, 2022 (last updated February 24, 2025)
10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function.
0
Attacker Value
Unknown
CVE-2022-36259
Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc.
0
Attacker Value
Unknown
CVE-2022-36258
Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
0
Attacker Value
Unknown
CVE-2022-36257
Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc.
0
Attacker Value
Unknown
CVE-2022-36256
Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode".
0
Attacker Value
Unknown
CVE-2022-36255
Disclosure Date: September 12, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
0
