Vulnerabilities

TI-2023-28434 CVE-2023-51813 · GHSA-2934-h34j-g33x

Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management…

MEDIUM 62

Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the staff_list parameter in the index.php component.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00351 Published 2024-01-30 No fix listed CWE-352

TI-2023-20757 CVE-2023-39712 · GHSA-57gq-jrqq-4w84

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory…

LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Addres…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00695 Published 2023-09-08 No fix listed CWE-79

TI-2023-20756 CVE-2023-39711 · GHSA-2ghg-fvx3-9q3q

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory…

MEDIUM 60

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Subtotal and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0064 Published 2023-09-07 No fix listed CWE-79

TI-2023-20758 CVE-2023-39714 · GHSA-ff3r-c92r-g8m2

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory…

MEDIUM 60

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Addres…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0064 Published 2023-09-01 No fix listed CWE-79

TI-2023-20755 CVE-2023-39710 · GHSA-fmx2-hfgf-5qqq

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory…

MEDIUM 60

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Addres…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0064 Published 2023-09-01 No fix listed CWE-79

TI-2023-20754 CVE-2023-39709 · GHSA-j339-3r75-26rh

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory…

MEDIUM 60

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Addres…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0064 Published 2023-08-28 No fix listed CWE-79

TI-2023-20753 CVE-2023-39708 · GHSA-x62m-76c7-mjx9

A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory…

MEDIUM 60

A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parame…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0064 Published 2023-08-28 No fix listed CWE-79

TI-2023-20752 CVE-2023-39707 · GHSA-6fh3-m8w9-fhx5

A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense pa…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00705 Published 2023-08-25 No fix listed CWE-79

Vulnerabilities

Filters