Lucene search
+L

26 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:49 a.m.•19 views

CVE-2022-37796

In Simple Online Book Store System 1.0 in /adminbook.php the Title, Author, and Description parameters are vulnerable to Cross Site ScriptingXSS...

5.4CVSS6.9AI score0.00494EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•6 views

CVE-2025-63891: Exposure of Sensitive Information to an Unauthorized Actor

Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents including schema and credential hashes via an unauthenticated HTTP GET request to /obs/database/obsdb.sql...

7.5CVSS5.8AI score0.00452EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-35013

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00552EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-47937

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00544EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-34990

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00462EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-40405

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00494EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:02 a.m.•21 views

CVE-2024-6951

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...

9.8CVSS7.4AI score0.00544EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:59 a.m.•18 views

CVE-2022-2770

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to launch the attack remotely. VDB-206166 is...

9.8CVSS7.5AI score0.00627EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:37 p.m.•17 views

CVE-2022-2748

A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS6.4AI score0.00462EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:37 p.m.•17 views

CVE-2022-2747

A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...

9.8CVSS7.5AI score0.00627EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:37 p.m.•18 views

CVE-2022-2746

A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigne...

9.8CVSS7.2AI score0.0056EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/21 11:15 a.m.•37 views

CVE-2024-6951

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...

9.8CVSS0.00544EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/07/21 11:00 a.m.•19 views

CVE-2024-6951 SourceCodester Simple Online Book Store System admin_delete.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...

6.5CVSS7.6AI score0.00544EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/21 12:00 a.m.•3 views

CVE-2024-6951: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...

9.8CVSS6.4AI score0.00544EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/12 12:15 a.m.•14 views

CVE-2022-37796

In Simple Online Book Store System 1.0 in /adminbook.php the Title, Author, and Description parameters are vulnerable to Cross Site ScriptingXSS...

5.4CVSS5.8AI score0.00494EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/09/12 12:15 a.m.•11 views

CVE-2022-37796

In Simple Online Book Store System 1.0 in /adminbook.php the Title, Author, and Description parameters are vulnerable to Cross Site ScriptingXSS...

5.4CVSS6.1AI score0.00494EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/09/12 12:00 a.m.•19 views

Simple Online Book Store System 跨站脚本漏洞

Simple Online Book Store System is a simple online bookstore system by Carlo Montero, an individual developer. A security vulnerability in the Title, Author, and Description parameters of the adminbook.php file in Simple Online Book Store System version 1.0 can be exploited to cause cross-site...

5.4CVSS5.5AI score0.00494EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/11 12:00 a.m.•8 views

CVE-2022-37796: Improper Neutralization of Input During Web Page Generation

In Simple Online Book Store System 1.0 in /adminbook.php the Title, Author, and Description parameters are vulnerable to Cross Site ScriptingXSS...

5.4CVSS6AI score0.00494EPSS
SaveExploits1References2
CVE
CVE
•added 2022/08/11 11:51 a.m.•70 views

CVE-2022-2771

SourceCodester Simple Online Book Store System is affected by CVE-2022-2771. The vulnerability lies in the /obs/bookPerPub.php endpoint, where manipulation of the bookisbn parameter enables SQL injection. The issue is exploitable remotely and impacts confidentiality, integrity, and availability a...

9.8CVSS8.3AI score0.00552EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2022/08/11 5:15 a.m.•33 views

CVE-2022-2746

A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigne...

9.8CVSS0.0056EPSS
SaveExploits0References1
Rows per page
Query Builder