Ahsanriaz26gmailcom ahsanriaz26@gmail.com Sales And Inventory System 1.0

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_stock.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

SourceCodester Sales and Inventory System GET Parameter sales_invoice1.php sql injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_customer_details.php sql injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_stock.php sql injection

SourceCodester Sales and Inventory System POST Parameter check_supplier_details.php sql injection

SourceCodester Sales and Inventory System GET Parameter purchase_invoice.php sql injection

SourceCodester Sales and Inventory System check_item_details.php sql injection

SourceCodester Sales and Inventory System POST check_customer_details.php sql injection

SourceCodester Sales and Inventory System add_stock.php sql injection

SourceCodester Sales and Inventory System add_sales_print.php sql injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_purchase.php sql injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_out_standing.php sql injection

SourceCodester Sales and Inventory System Search dashboard.php sql injection

SourceCodester Sales and Inventory System HTTP POST Request view_customers.php sql injection

SourceCodester Sales and Inventory System HTTP GET Request update_supplier.php sql injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_sales.php sql injection

SourceCodester Sales and Inventory System HTTP GET Parameter update_category.php sql injection

SourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injection

SourceCodester Sales and Inventory System POST Parameter view_supplier.php sql injection

SourceCodester Sales and Inventory System HTTP POST Request view_payments.php sql injection

SourceCodester Sales and Inventory System HTTP POST Request view_product.php sql injection

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_sales.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_category.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_customer.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_supplier.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the add_purchase.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_supplier.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_customers.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the view_payments.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.

A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the update_details.php file. The application fails to sanitize the "website" parameter provided in a POST request. This allows authenticated attackers to inject arbitrary web script or HTML that is stored in the database and executed whenever the store details page is accessed.