Book Store Management System Security Vulnerability

Book Store Management System is an online bookstore system by Carlo Montero, a personal developer. A security vulnerability exists in Book Store Management System v1.0, which originates from a cross-site scripting vulnerability in the /bsmsci/index.php/category file...

CVE-2023-49540: Improper Neutralization of Input During Web Page Generation

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...

CVE-2023-49539: Improper Neutralization of Input During Web Page Generation

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

CVE-2023-49540

The Book Store Management System v1.0 is vulnerable to a cross-site scripting (XSS) flaw in the /bsms_ci/index.php/history endpoint. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the history parameter. The vulnerability can be triggered by inserting a p...

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

CVE-2023-49539

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

CVE-2024-24096

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...

CVE-2024-24100

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...

CVE-2024-24096

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...

CVE-2024-24100

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...

Sql injection

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...

CVE-2024-24096: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...

CVE-2024-24096

The Code-projects Computer Book Store 1.0 software is vulnerable to SQL Injection via the BookSBIN component. This vulnerability arises from the improper neutralization of special elements used in an SQL command, which could allow an attacker to execute malicious SQL statements. Practical consequ...

CVE-2024-24096

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...

CVE-2024-24100

The Code-projects Computer Book Store 1.0 software is vulnerable to an SQL Injection attack via the PublisherID parameter. This vulnerability could allow an attacker to gain unauthorized access to sensitive data. While the documents do not provide a specific fix or a newer version containing a pa...

CVE-2024-24096

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...

CVE-2024-24100

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...

CVE-2024-24100: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...

Computer Book Store Security Breach

Computer Book Store is an online bookstore system by the individual developer Carmelo Garcia. A security vulnerability exists in Computer Book Store version 1.0, which originates from the system's susceptibility to SQL injection attacks...