EUVD-2022-30063

Malicious code in bioql PyPI...

EUVD-2022-36053

Malicious code in bioql PyPI...

CVE-2023-1357

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads...

CVE-2022-32987

Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...

CVE-2023-1357: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads...

CVE-2022-32987

Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...

CVE-2022-32987

CVE-2022-32987 concerns multiple cross-site scripting (XSS) vulnerabilities in Simple Bakery Shop Management System v1.0, specifically in the /bsms/?page=manage_account page. The issue arises from crafted input in the Username or Full Name fields, enabling execution of arbitrary web scripts/HTML....

PT-2022-21622

Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management System version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields in the /bsms/?page=manage account API endpoin...

CVE-2022-32987: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...

PT-2022-18789

Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management System version 1.0 Description The issue concerns a file disclosure vulnerability. It can be exploited via the "/bsms/?page=products" API endpoint. Recommendations For Simple Bakery Shop Management System version...

CVE-2022-28063: Undefined Security Weakness

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

CVE-2022-25393: Improper Neutralization of Special Elements used in an SQL Command

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

PT-2022-17257

Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management version 1.0 Description A SQL injection issue was found, which can be exploited via the username parameter. Recommendations For Simple Bakery Shop Management version 1.0, consider restricting access to the...