Simple Online Book Store System SQL Injection Vulnerability

Simple Online Book Store System is a simple online bookstore system by Carlo Montero, an individual developer. Simple Online Book Store System suffers from a SQL injection vulnerability that arises from an unknown function in its book.php component that improperly handles the parameter bookisbn,...

Simple Online Book Store System SQL Injection Vulnerability

Simple Online Book Store System is a simple online bookstore system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Online Book Store System, which originates from an unknown function in the file /obs/book.php, where manipulation of the parameter bookisbn can lead t...

CVE-2022-2770: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to launch the attack remotely. VDB-206166 is...

CVE-2022-2747: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...

CVE-2020-19110

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code...

CVE-2020-19110

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code...

PT-2021-10285

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue allows a remote malicious user to execute arbitrary code via SQL Injection in the publisher parameter to the "edit book.php" API endpoint. This could potentially lead to unauthorized access...

PT-2021-10279

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue allows a remote malicious user to execute arbitrary code via SQL Injection in the isbn parameter to the "edit book.php" endpoint. This could potentially lead to unauthorized access and data...

PT-2021-10281

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue allows a remote malicious user to execute arbitrary code via SQL Injection in the bookisbn parameter to the "book.php" endpoint. This could potentially lead to unauthorized access and data...

CVE-2020-19110: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code...

CSE Bookstore 1.0 - Multiple SQL Injection

Exploit Title : CSE Bookstore 1.0 - Multiple SQL Injection Date : 2020-12-21 Author : Musyoka Ian Version : CSE Bookstore 1.0 Vendor Homepage: https://projectworlds.in/ Platform : PHP Tested on : Debian CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR...

XSS Vulnerability in Hot Drama CMS v2.1

Hot Drama CMS is a movie and TV station building system developed by PHP+MySQL. A stored xss injection vulnerability exists in /wap/book.php in Hot Drama CMS v2.1, which can be exploited by attackers to obtain an administrator cookie...

CVE-2018-14838

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

Cross site scripting

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14838

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14838

CVE-2018-14838 affects rejucms 2.1 and is a stored XSS vulnerability in the admin/book.php content parameter. The issue allows injection of script/HTML through that parameter, leading to potential script execution in the context of the affected CMS. No explicit mitigation or patch details are pro...

CVE-2018-14838: Improper Neutralization of Input During Web Page Generation

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

PT-2018-12756

Name of the Vulnerable Software and Affected Versions rejucms version 2.1 Description The issue is related to stored XSS, which occurs via the content parameter in the "admin/book.php" endpoint. Recommendations For rejucms version 2.1, avoid using the content parameter in the "admin/book.php"...

PT-2018-12660

Name of the Vulnerable Software and Affected Versions XYCMS version 1.7 Description The issue is related to stored XSS in XYCMS, where a crafted request to add do.php can lead to an exploit. This is associated with the system/edit book.php and add book.php files. Recommendations For XYCMS version...

tabakshistorie.nl XSS vulnerability

Open Bug Bounty ID: OBB-610111 Description| Value ---|--- Affected Website:| tabakshistorie.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...