repository icon
neorazorx / facturascripts Project repository

Open source ERP software. Built on modern PHP and bootstrap 4. Easy and powerful.

Submit a report

FIRST INTERACTION

WITHIN5 DAYS

REVIEW

WITHIN5 DAYS

FIX

WITHIN22 DAYS

Stored XSS in EditEstadoDocumento
iohehe
Critical
Reflected XSS in param 'activetab' and param 'code'
kmaron1n
High
Cross-site scripting - Reflected XSS caused by error logs
iohehe
self closed
Cross-site scripting - Reflected XSS caused by error logs in neorazorx/facturasc...
iohehe
Medium
•CVE-2022-2016
Refelect XSS in neorazorx/facturascripts
iohehe
Medium
•CVE-2022-1988
Reflected Cross-site Scripting (XSS)
khanhchauminh
self closed
xss bypass
ranjit-git
Critical
•$12
Stored XSS
khanhchauminh
Critical
•$14
xss using .xsig file
ranjit-git
Critical
•$12
xss bypass of https://huntr.dev/bounties/4bc8f164-faf8-4096-aa00-e439fa976876/
ranjit-git
Critical
•$12
xss vi filename
ranjit-git
Critical
•$10
xss filter bypass
ranjit-git
Critical
•$14
Stored XSS due to the setting text/xml mime type for xml files
416e6e61
Critical
•$10
Cross-site Scripting (XSS) in Search Fuction with filter
dungtuanha
Critical
•$10
Reflected Cross site scripting
gaurav-g2
High
•$5
Account Takeover
gaurav-g2
Critical
•$10•CVE-2022-1715
Stored Xss
gaurav-g2
Critical
•$10
Reflected Xss using url based payload
gaurav-g2
Critical
•$10•CVE-2022-1682
Cross-site scripting - Stored via upload `.xsig` file
nhienit2010
Critical
•$10
Cross-site Scripting (XSS) via Cookie Value
dungtuanha
Critical
•$10
Sensitive data in EXIF data do not strip from image uploaded
nhienit2010
informative
Low
Cross-site scripting - Reflected via upload `.xml` file
nhienit2010
Critical
•$10
Cross-site scripting - Reflected in Create Subaccount
nhienit2010
Critical
•$10•CVE-2022-1571
Cross-site Scripting (XSS) in Error Page
dungtuanha
Critical
•$10
Improper Access Control (IDOR)
dungtuanha
Critical
•$10
Stored Cross-site Scripting via file upload
dungtuanha
duplicate
Critical
Multiple Store XSS via upload svg file and the file name of attachment
minhnb11
High
•$5•CVE-2022-2065
Refelect XSS in facturascripts
minhnb11
High
•$5•CVE-2022-2066
Cross-site Scripting (XSS) - Reflected
dungtuanha
Critical
•$10
Stored XSS via upload plugin functionality in zip format
iamshooter99
Critical
•$10•CVE-2022-1514
Store XSS in title parameter executing at EditUser Page & EditProducto page
iamshooter99
Critical
•$10•CVE-2022-1457
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25