CVE-2019-25265 | Medium | 6.4 | 2026-02-03 | Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers ca… |
CVE-2023-6435 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6434 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6433 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6432 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6431 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6430 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6429 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6428 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6427 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6426 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Invoicing System 2.6, which does not sufficiently encode user-controlled input, resulting in persistent X… |
CVE-2023-6425 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in pers… |
CVE-2023-6424 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in pers… |
CVE-2023-6423 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in pers… |
CVE-2023-6422 | Medium | 6.3 | 2023-11-30 | A vulnerability has been discovered in BigProf Online Clinic Management System 2.2, which does not sufficiently encode user-controlled input, resulting in pers… |
CVE-2020-35675 | High | 8.8 | 2022-09-29 | BigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to move the records of members across groups. The applicable end… |
CVE-2020-35674 | Critical | 9.8 | 2022-09-29 | BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordReset.php (the endpoint that is responsib… |
CVE-2021-27839 | Medium | 4.4 | 2021-03-03 | A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform malicious actions such as redirecting a… |
CVE-2021-21260 | High | 7.6 | 2021-01-22 | Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants and freelancers created using AppGini… |
CVE-2020-35677 | Medium | 4.8 | 2020-12-24 | BigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML characters upon an administrator using admin/pageEditGroup.php to creat… |
CVE-2020-35676 | Medium | 6.1 | 2020-12-24 | BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such… |
CVE-2020-6583 | Medium | 6.1 | 2020-01-08 | BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve… |
CVE-2018-18587 | Medium | 5.3 | 2018-10-23 | BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash. |