CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the List Handler component of the Rizwan17 inventory-management system, specifically in the includes/DBOperation.php file, allowing remote attackers to manipulate the category_name, brand_name, or product_name arguments. This weakness could lead to unauthorized script execution in the context of the user's browser, potentially compromising user data or session integrity. Organizations using this inventory management system should prioritize remediation, especially those handling sensitive user information or operating in regulated environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the file includes/DBOperation.php of the component List Handler. This manipulation of the argument category_name/brand_name/product_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.