Lucene search
+L

336 matches found

Packet Storm
Packet Storm
added 2024/10/14 12:0 a.m.345 views

Bookstore Management System 1.0 SQL Injection

============================================================================================================================================= | Title : Bookstore Management System v1.0 SQL injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

7.4AI score
SaveExploits0
NVD
NVD
added 2024/09/20 4:15 p.m.19 views

CVE-2024-9036

A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file adminadd.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00507EPSS
SaveExploits1References5
OSV
OSV
added 2024/09/20 4:15 p.m.3 views

CVE-2024-9036

A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file adminadd.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

5.3CVSS6.3AI score0.00507EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/09/20 3:31 p.m.14 views

CVE-2024-9036 itsourcecode Online Bookstore admin_add.php unrestricted upload

A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file adminadd.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

6.5CVSS6.9AI score0.00507EPSS
SaveExploits1References5
CVE
CVE
added 2024/09/20 3:31 p.m.55 views

CVE-2024-9036

CVE-2024-9036 affects itsourcecode Online Bookstore 1.0. The issue is a vulnerability in admin_add.php, where manipulation of the image parameter allows unrestricted file upload. This could enable remote exploitation; multiple sources note the exploit has been disclosed publicly. No remediation d...

6.5CVSS6.4AI score0.00507EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2024/09/20 3:31 p.m.21 views

CVE-2024-9036 itsourcecode Online Bookstore admin_add.php unrestricted upload

A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file adminadd.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00507EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.8 views

itsourcecode Online Bookstore 代码问题漏洞

itsourcecode Online Bookstore is an online bookstore of itsourcecode open source. A code issue vulnerability exists in version 1.0 of itsourcecode Online Bookstore due to an unrestricted file upload in the parameter image...

6.5CVSS6.7AI score0.00507EPSS
SaveExploits1References7
OSV
OSV
added 2024/08/26 9:15 p.m.4 views

CVE-2024-43255

Cross-Site Request Forgery CSRF vulnerability in Stormhill Media MyBookTable Bookstore allows Cross-Site Scripting XSS.This issue affects MyBookTable Bookstore: from n/a through 3.3.9...

6.1CVSS5.8AI score0.00153EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/26 9:15 p.m.34 views

CVE-2024-43255

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zookatron MyBookTable Bookstore mybooktable.This issue affects MyBookTable Bookstore: from n/a through = 3.3.9...

7.1CVSS0.00153EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/26 8:25 p.m.15 views

CVE-2024-43255 WordPress MyBookTable Bookstore by Stormhill Media plugin <= 3.3.9 - CSRF to XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zookatron MyBookTable Bookstore mybooktable.This issue affects MyBookTable Bookstore: from n/a through = 3.3.9...

7.1CVSS5.9AI score0.00153EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/26 8:25 p.m.37 views

CVE-2024-43255 WordPress MyBookTable Bookstore by Stormhill Media plugin <= 3.3.9 - CSRF to XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zookatron MyBookTable Bookstore mybooktable.This issue affects MyBookTable Bookstore: from n/a through = 3.3.9...

7.1CVSS0.00153EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/26 8:25 p.m.66 views

CVE-2024-43255

CVE-2024-43255 is a CSRF-based vulnerability in the WordPress plugin MyBookTable Bookstore by Stormhill Media (affected up to version 3.3.9). The issue enables a Cross-Site Scripting (XSS) condition via CSRF; remediation is to upgrade to the latest plugin version as indicated by connected advisor...

7.1CVSS5.9AI score0.00153EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/26 12:0 a.m.9 views

PT-2024-30417 · WordPress · Mybooktable Bookstore

Name of the Vulnerable Software and Affected Versions: MyBookTable Bookstore versions 3.3.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS in the MyBookTable Bookstore plugin for WordPress. Users are advised to upgrade to...

7.1CVSS6.3AI score0.00153EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/08/26 12:0 a.m.3 views

WordPress plugin MyBookTable Bookstore 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.1CVSS6.5AI score0.00153EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/08/12 1:9 p.m.6 views

WordPress MyBookTable Bookstore by Stormhill Media plugin <= 3.3.9 - CSRF to XSS vulnerability

CSRF to XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin MyBookTable Bookstore versions = 3.3.9...

7.1CVSS6.4AI score0.00153EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/08/12 12:0 a.m.11 views

WordPress MyBookTable Bookstore Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software MyBookTable Bookstore Type Plugin Vulnerable versions = 3.3.9 Fixed in 3.5.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-43255 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 8cdffe075f8d Credits Majed Refaea...

7.1CVSS6.7AI score0.00153EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/07/21 11:15 a.m.8 views

CVE-2024-6951

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...

9.8CVSS6.4AI score0.00544EPSS
SaveExploits1References4
NVD
NVD
added 2024/06/17 2:15 p.m.22 views

CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

8.4CVSS0.00238EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/17 2:15 p.m.7 views

CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

8.4CVSS6.1AI score0.00238EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/06/17 12:0 a.m.15 views

CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

8.4AI score0.00238EPSS
SaveExploits1References1
Rows per page
Query Builder