CSE Bookstore 1.0 - 'quantity' Persistent Cross-site Scripting

Exploit Title: CSE Bookstore 1.0 - 'quantity' Persistent Cross-site Scripting Date: 30/10/2020 Exploit Author: Vyshnav NK Vendor Homepage: https://projectworlds.in/ Software Link: https://github.com/projectworlds32/online-book-store-project-in-php/archive/master.zip Version: 1.0 Tested on: Window...

bookstore.saibaba.gr Cross Site Scripting vulnerability OBB-1351388

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bookstore.saibaba.gr Cross Site Scripting vulnerability OBB-1335959

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

aboudi-bookstore.com Cross Site Scripting vulnerability OBB-1281276

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Themosis Framework BookStore 1.3.0 Database Disclosure

Exploit Title : Themosis Framework BookStore 1.3.0 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 10/04/2019 Vendor Homepage : framework.themosis.com Software Download Link : github.com/themosis/bookstore/archive/master.zip Software...

Round 4 — Hacker Puts 26 Million New Accounts Up For Sale On Dark Web

A hacker who was selling details of nearly 890 million online accounts stolen from 32 popular websites in three separate rounds has now put up a fourth batch of millions of records originating from 6 other sites for sale on the dark web. The Hacker News today received a new email from the Pakista...

arvin-bookstore.com XSS vulnerability

Open Bug Bounty ID: OBB-705042 Description| Value ---|--- Affected Website:| arvin-bookstore.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

books-sanseido.jp XSS vulnerability

Open Bug Bounty ID: OBB-703480 Description| Value ---|--- Affected Website:| books-sanseido.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

bookstore.entrepreneur.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-627586 Description| Value ---|--- Affected Website:| bookstore.entrepreneur.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

mp3.florasbookstore.com XSS vulnerability

Open Bug Bounty ID: OBB-607180 Description| Value ---|--- Affected Website:| mp3.florasbookstore.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

messages.florasbookstore.com XSS vulnerability

Open Bug Bounty ID: OBB-596196 Description| Value ---|--- Affected Website:| messages.florasbookstore.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FS Book Store Script - 'category' SQL Injection

Exploit Title: FS Book Store Script - SQL Injection Date: 2017-10-23 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/book-store-script/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected]...

braillebookstore.com XSS vulnerability

Vulnerable URL: http://www.braillebookstore.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 738903 VIP website status:| No Coordinated Disclosure Timeline: Descriptio...

parklandbookstore.com XSS vulnerability

Vulnerable URL: http://www.parklandbookstore.com/textbookexpress/gettxtexpress.asp?remote=1=2023==SUMMER%202017=CHE=106=1"...

corningbookstore.com XSS vulnerability

Vulnerable URL: http://www.corningbookstore.com/textbookexpress/gettxtexpress.asp?remote=1=6003==FALL+2017=MATH=1215=1"...

bookstore.yosemite.cc.ca.us XSS vulnerability

Vulnerable URL: http://bookstore.yosemite.cc.ca.us/ePOS/form="robots/textbooks.htmlcategory=1=527=527 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

bookstore.umaine.edu XSS vulnerability

Vulnerable URL: http://www.bookstore.umaine.edu/ePOS/form=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3Erobots/catalog.htmlcategory=95=411=411 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:58 GMT Vulnerability type:| XSS...

bookstore.franciscan.edu IFRAME Injection vulnerability

Vulnerable URL: http://bookstore.franciscan.edu/ePOS/form="robots/item.htmlnumber=W43134=421=421 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:58 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Ran...

MyBookTable <= 2.1.4 - Unspecified Vulnerability

The MyBookTable Bookstore by Author Media WordPress plugin was affected by an Unspecified Vulnerability security vulnerability...

CVE-2014-7741

The Healing Bookstore aka com.wHealingBookstore application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...