503 matches found
CVE-2024-24100
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...
PT-2023-31250 · Unknown · Book Store Management System
Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter in the "/bsms ci/index.php/category" API endpoint. This enabl...
PT-2023-31251 · Unknown · Book Store Management System
Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: A cross-site scripting XSS issue was found in the /bsms ci/index.php/history endpoint, allowing attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the...
PT-2023-31252 · Unknown · Book Store Management System
Name of the Vulnerable Software and Affected Versions: Book Store Management System version v1 Description: The issue allows attackers to access unauthorized pages and execute administrative functions without authenticating, due to incorrect access control. Recommendations: For Book Store...
CVE-2023-43739 Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi)
The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-43739 Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi)
The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-43740
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of adminedit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...
CVE-2023-43740
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of adminedit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...
Unrestricted file upload
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of adminedit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...
CVE-2023-43740 Online Book Store Project v1.0 - Insecure File Upload
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of adminedit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...
CVE-2023-43740 Online Book Store Project v1.0 - Insecure File Upload
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of adminedit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...
CVE-2023-43740
CVE-2023-43740 affects Online Book Store Project v1.0. The vulnerability is an Insecure File Upload on the image parameter of admin_edit.php, allowing an authenticated attacker to achieve Remote Code Execution on the hosting server. Connected sources corroborate the existence of an insecure file ...
PT-2023-28960 · Unknown · Online Book Store Project
Name of the Vulnerable Software and Affected Versions: Online Book Store Project version 1.0 Description: The issue allows an authenticated attacker to obtain Remote Code Execution on the server hosting the application via an Insecure File Upload vulnerability on the image parameter of the "admin...
PT-2023-28958 · Online Book Store +1 · Online Book Store Project
Name of the Vulnerable Software and Affected Versions: Online Book Store Project affected versions not specified Description: The issue concerns the bookisbn parameter of the "cart.php" resource, which does not validate the characters received, sending them unfiltered to the database. This lack o...
Online Book Store Project SQL Injection Vulnerability
Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. A SQL injection vulnerability exists in Online Book Store Project v1.0, which originates from characters that are not validated as received and are sent to the database...
Projectworlds Online Book Store Project In Php Code Issue Vulnerability
Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. A code issue vulnerability exists in Projectworlds Online Book Store Project In Php v1.0 that stems from vulnerability to an insecure file upload vulnerability, which cou...
Online Book Store 1.0 SQL Injection
Exploit Title: Online Book Store 1.0 - process.php SQL injection Google Dork: 4/26/2023 Exploit Author: Or4nG.M4n Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-book-store-project-in-php/ Software Link:...
Book Store Management System 1.0.0 Cross Site Scripting
Exploit Title: Book Store Management System 1.0.0 - Stored Cross-Site Scripting XSS Date: 2022-11-08 Exploit Author: Rajeshwar Singh Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsmsci.zip Tested on:...
Book Store Management System 1.0.0 - Stored Cross-Site Scripting (XSS)
Exploit Title: Book Store Management System 1.0.0 - Stored Cross-Site Scripting XSS Date: 2022-11-08 Exploit Author: Rajeshwar Singh Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsmsci.zip Tested on:...