Approved changes feed: RSS · Atom

cpe:2.3:a:cups_easy:cups_easy_(purchase_&_inventory):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCups Easy (28b87de4-db69-5350-bab1-257c772ed06c)
ProductCups Easy (Purchase & Inventory) (666ef856-26cf-5ea0-a6fd-5ea8ec8517f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-23896 vulnerable 2026-06-08 06:29:40.815775 Cross-Site Scripting (XSS) vulnerability in Cups Easy
HIGH (8.2)
A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stock.php, in the batchno parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
Published: 2024-01-26T10:18:48.981Z
Updated: 2025-05-29T15:13:06.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23895 vulnerable 2026-06-08 06:29:40.815187 Cross-Site Scripting (XSS) vulnerability in Cups Easy
HIGH (8.2)
A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/locationcreate.php, in the locationid parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
Published: 2024-02-02T09:18:59.384Z
Updated: 2024-08-01T23:13:08.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23894 vulnerable 2026-06-08 06:29:40.814520 Cross-Site Scripting (XSS) vulnerability in Cups Easy
HIGH (8.2)
A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancecreate.php, in the issuancedate parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
Published: 2024-01-26T10:18:03.947Z
Updated: 2025-05-29T15:13:12.890Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23893 vulnerable 2026-06-08 06:29:40.814027 Cross-Site Scripting (XSS) vulnerability in Cups Easy
HIGH (8.2)
A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentermodify.php, in the costcenterid parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
Published: 2024-01-26T10:17:45.900Z
Updated: 2025-05-29T15:13:20.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23892 vulnerable 2026-06-08 06:29:40.813408 Cross-Site Scripting (XSS) vulnerability in Cups Easy
HIGH (8.2)
A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentercreate.php, in the costcenterid parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.
Published: 2024-01-26T10:17:19.018Z
Updated: 2025-05-29T15:13:26.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23891 vulnerable 2026-06-08 06:29:40.812824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23890 vulnerable 2026-06-08 06:29:40.812240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23889 vulnerable 2026-06-08 06:29:40.811800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23888 vulnerable 2026-06-08 06:29:40.811280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23887 vulnerable 2026-06-08 06:29:40.810763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23886 vulnerable 2026-06-08 06:29:40.810089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23885 vulnerable 2026-06-08 06:29:40.809525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23884 vulnerable 2026-06-08 06:29:40.809113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23883 vulnerable 2026-06-08 06:29:40.808702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23882 vulnerable 2026-06-08 06:29:40.808274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23881 vulnerable 2026-06-08 06:29:40.807768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23880 vulnerable 2026-06-08 06:29:40.807371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23879 vulnerable 2026-06-08 06:29:40.806429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23878 vulnerable 2026-06-08 06:29:40.806031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23877 vulnerable 2026-06-08 06:29:40.805636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23876 vulnerable 2026-06-08 06:29:40.805219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23875 vulnerable 2026-06-08 06:29:40.804814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23874 vulnerable 2026-06-08 06:29:40.804319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23873 vulnerable 2026-06-08 06:29:40.803710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23872 vulnerable 2026-06-08 06:29:40.803194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23871 vulnerable 2026-06-08 06:29:40.802525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23870 vulnerable 2026-06-08 06:29:40.802049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23869 vulnerable 2026-06-08 06:29:40.801493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23868 vulnerable 2026-06-08 06:29:40.800939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23867 vulnerable 2026-06-08 06:29:40.800250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23866 vulnerable 2026-06-08 06:29:40.799603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23865 vulnerable 2026-06-08 06:29:40.798921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23864 vulnerable 2026-06-08 06:29:40.798444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23863 vulnerable 2026-06-08 06:29:40.797876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23862 vulnerable 2026-06-08 06:29:40.797332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23861 vulnerable 2026-06-08 06:29:40.796858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23860 vulnerable 2026-06-08 06:29:40.796231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23859 vulnerable 2026-06-08 06:29:40.795550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23858 vulnerable 2026-06-08 06:29:40.781851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23857 vulnerable 2026-06-08 06:29:40.781261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23856 vulnerable 2026-06-08 06:29:40.780594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23855 vulnerable 2026-06-08 06:29:40.779228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.