CVE-2023-49539: Improper Neutralization of Input During Web Page Generation

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

Book Store Management System Security Vulnerability

Book Store Management System is an online bookstore system by Carlo Montero Personal Developer. A security vulnerability exists in Book Store Management System v1.0, which is caused by incorrect access control...

CVE-2023-49540

The Book Store Management System v1.0 is susceptible to a cross-site scripting (XSS) vulnerability within the /bsms_ci/index.php/history page. The root cause is the improper neutralization of input, which allows an attacker to execute arbitrary web scripts or HTML. Specifically, a crafted payload...

CVE-2023-49540

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...

Book Store Management System Security Vulnerability

Book Store Management System is an online bookstore system by Carlo Montero, a personal developer. A security vulnerability exists in Book Store Management System v1.0, which originates from a cross-site scripting vulnerability in the /bsmsci/index.php/category file...

CVE-2023-49539

The Book Store Management System v1.0 contains a cross-site scripting (XSS) vulnerability within the /bsms_ci/index.php/category endpoint. The root cause is the improper neutralization of input during web page generation, specifically allowing an attacker to inject a crafted payload into the cate...

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

PT-2023-31251 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: A cross-site scripting XSS issue was found in the /bsms ci/index.php/history endpoint, allowing attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the...

PT-2023-31250 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter in the "/bsms ci/index.php/category" API endpoint. This enabl...

PT-2023-31252 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version v1 Description: The issue allows attackers to access unauthorized pages and execute administrative functions without authenticating, due to incorrect access control. Recommendations: For Book Store...

Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber versions prior to 2.0, which stems from a...

Microweber Security Breach

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A security vulnerability exists in Microweber CMS version 2.0.1, which stems from the...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.3, which...

Book Store Management System 1.0.0 Cross Site Scripting

Exploit Title: Book Store Management System 1.0.0 - Stored Cross-Site Scripting XSS Date: 2022-11-08 Exploit Author: Rajeshwar Singh Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsmsci.zip Tested on:...

Book Store Management System 1.0.0 - Stored Cross-Site Scripting (XSS)

Exploit Title: Book Store Management System 1.0.0 - Stored Cross-Site Scripting XSS Date: 2022-11-08 Exploit Author: Rajeshwar Singh Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsmsci.zip Tested on:...

Book Store Management System Cross-Site Scripting Vulnerability (CNVD-2023-05395)

Book Store Management System is an online bookstore system. A security vulnerability exists in Book Store Management System v1.0, which stems from a cross-site scripting vulnerability in the /bsmsci/index.php/book page. No detailed vulnerability details are available at this time...

CVE-2023-23024

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...

CVE-2023-23024

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...

CVE-2023-23024

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...

Book Store Management System 跨站脚本漏洞

Book Store Management System is an online bookstore system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Book Store Management System v1.0, which was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. An attacker could u...