cve.bz

go2ismail asp.net-core-inventory-order-management-system vulnerabilities, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 7.1CVE-2026-125385EPSS 0.4%

    INDOTALENT WHMS before 10.20261109 contains a path traversal vulnerability that allows authenticated users to read arbitrary files via the documentName and imageName parameters. Attackers can self-register and supply traversal sequences to…

  2. 9.3CVE-2026-125384EPSS 0.5%

    INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated attackers to gain administrator access because UserAdminSeeder creates admin@root.com with password 123456. Attackers can log in wi…

  3. 9.3CVE-2026-125383EPSS 0.8%

    INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote att…

  4. 5.3CVE-2026-3263EPSS 0.4%

    A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/Security/ of the component Security API. Performing a manip…

  5. 2.1CVE-2026-3262EPSS 0.5%

    A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. Th…