CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Path Traversal: '.../...//' vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.10.4.
Explanation of Vulnerability in Simple Terms
Barcode Scanner with Inventory & Order Manager versions 1.10.4 and earlier contain a vulnerability allowing authenticated administrators to read sensitive data, modify records, and disrupt service. The flaw requires high-level privileges and network access but does not require user interaction. Affected installations should update immediately.
What an attacker can do
An authenticated admin can read sensitive data, modify records, and disrupt service availability.
Potential impact on your site
Admins with compromised credentials can access confidential inventory data, alter orders, and cause downtime.
Conditions required to exploit
Attacker must have administrator-level credentials and network access to the application.
Key dates
External resources
Related vulnerabilities
