Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9
Exploited now
Siamonhasan records in CISA KEVNo Siamonhasan vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 76
A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00307 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00301 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00307 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00307 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00307 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00307 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00222 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00307 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00307 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 73
A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00307 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 70
A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00299 · Published 2024-08-20 · No fix listed CWE-352
Priority HIGH 66
A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00372 · Published 2024-08-04 · No fix listed CWE-352
Priority MEDIUM 64
A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00372 · Published 2024-08-04 · No fix listed CWE-352
THREATIST.IORead the docs