Vulnerabilities

TI-2024-24402 CVE-2024-36779 · GHSA-crg8-w24w-qvmq

Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php.

HIGH 82

Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00572 Published 2024-06-06 No fix listed CWE-89

TI-2023-28465 CVE-2023-51951 · GHSA-v53j-mp5w-59f7

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to…

HIGH 76

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the manage_bo.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0135 Published 2024-02-05 No fix listed CWE-89

TI-2022-03739 CVE-2022-4090 · GHSA-3c5h-x9vw-jj93

rickxy Stock Management System cross-site request forgery

HIGH 71

A vulnerability was found in rickxy Stock Management System and classified as problematic.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00267 Published 2022-11-24 No fix listed CWE-863

TI-2022-03738 CVE-2022-4089 · GHSA-44q9-f6fm-pq4w

rickxy Stock Management System processlogin.php cross site scripting

MEDIUM 58

A vulnerability was found in rickxy Stock Management System.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00416 Published 2022-11-24 No fix listed CWE-707

TI-2022-03737 CVE-2022-4088 · GHSA-hjvw-qjj4-4frf

rickxy Stock Management System processlogin.php sql injection

HIGH 81

A vulnerability was found in rickxy Stock Management System and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00612 Published 2022-11-24 No fix listed CWE-707

TI-2021-19828 CVE-2021-44114 · GHSA-8w9j-phjg-ggcj

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Stock Management System…

LOW 24

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00996 Published 2022-01-31 No fix listed CWE-79

TI-2020-14836 CVE-2020-24198 · GHSA-9cqc-m6m2-286c

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System…

MEDIUM 60

A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.'

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00835 Published 2020-09-09 No fix listed CWE-79

TI-2020-14835 CVE-2020-24197 · GHSA-fm3h-87mp-cxq6

A SQL injection vulnerability in the login component in Stock Management System v1.0…

MEDIUM 45

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01426 Published 2020-09-09 No fix listed CWE-89

TI-2020-14681 CVE-2020-23830 · GHSA-82cp-p788-5r5g

A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester…

LOW 32

A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when the…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00534 Published 2020-09-02 No fix listed CWE-352

TI-2020-14682 CVE-2020-23831 · GHSA-vj5q-p268-7mw4

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal…

LOW 30

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an u…

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.00842 Published 2020-09-01 No fix listed CWE-79

Vulnerabilities

Filters