Online Inventory Manager

7 results · Clear filters · Feed

• Medium 6.4
  CVE-2019-25265

  Online Inventory Manager 3.2 - Persistent Cross-Site Scripting

  Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers can inject malicious JavaScript through the description field that will execute when the groups page i…

  Bigprof Online Inventory Manager
  Feb 3, 2026
• Medium 6.3
  CVE-2023-6435

  Cross-site Scripting vulnerability in BigProf products

  A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/batches_view.php, in the FirstRecord parameter. Exploitation of this vulnerabi…

  Bigprof Online Inventory Manager
  Nov 30, 2023
• Medium 6.3
  CVE-2023-6434

  Cross-site Scripting vulnerability in BigProf products

  A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/sections_view.php, in the FirstRecord parameter. Exploitation of this vulnerab…

  Bigprof Online Inventory Manager
  Nov 30, 2023
• Medium 6.3
  CVE-2023-6433

  Cross-site Scripting vulnerability in BigProf products

  A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/suppliers_view.php, in the FirstRecord parameter. Exploitation of this vulnera…

  Bigprof Online Inventory Manager
  Nov 30, 2023
• Medium 6.3
  CVE-2023-6432

  Cross-site Scripting vulnerability in BigProf products

  A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/items_view.php, in the FirstRecord parameter. Exploitation of this vulnerabili…

  Bigprof Online Inventory Manager
  Nov 30, 2023
• Medium 6.3
  CVE-2023-6431

  Cross-site Scripting vulnerability in BigProf products

  A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/categories_view.php, in the FirstRecord parameter. Exploitation of this vulner…

  Bigprof Online Inventory Manager
  Nov 30, 2023
• Medium 6.3
  CVE-2023-6430

  Cross-site Scripting vulnerability in BigProf products

  A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent XSS through /inventory/transactions_view.php, in the FirstRecord parameter. Exploitation of this vuln…

  Bigprof Online Inventory Manager
  Nov 30, 2023