Skip to content
OpenAdvisories

Product · oretnom23

Stock Management System

7 known vulnerabilities.

6 results · Clear filters · Feed

  • Medium 6.3

    SourceCodester/oretnom23 Stock Management System view_bo sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=back_order/view_bo. The manipulation of the argument ID le…

  • Medium 6.3

    SourceCodester/oretnom23 Stock Management System view_sale sql injection

    A vulnerability classified as critical has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected is an unknown function of the file /admin/?page=sales/view_sale. The manipulation of the argument ID leads to sql injection. It is possible…

  • Medium 6.3

    SourceCodester/oretnom23 Stock Management System view_return sql injection

    A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/?page=return/view_return. The manipulation of the argument ID leads to sql injectio…

  • Medium 6.3

    SourceCodester/oretnom23 Stock Management System view_receiving sql injection

    A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /sms/admin/?page=receiving/view_receiving&id=1. The manipulation of the argument ID leads to…

  • Medium 4.3

    SourceCodester/oretnom23 Stock Management System Users.php cross-site request forgery

    A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=save. The manipulation leads to cross-site request forgery. The atta…

  • Medium 4.7

    SourceCodester/oretnom23 Stock Management System Purchase Order Details Page view_po sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester/oretnom23 Stock Management System 1.0. This affects an unknown part of the file /admin/?page=purchase_order/view_po of the component Purchase Order Details Page. The manipulation o…