117 matches found
CVE-2025-4472 code-projects Departmental Store Management System bill stack-based overflow
A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical. Affected is the function bill. The manipulation of the argument Item Code leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The explo...
CVE-2025-4472
CVE-2025-4472 affects code-projects Departmental Store Management System 1.0, with the vulnerable component being the bill() function. The root cause is a stack-based buffer overflow triggered by manipulating the Item Code argument, enabling a local attack. Public disclosures exist, and multiple ...
CVE-2025-4472 code-projects Departmental Store Management System bill stack-based overflow
A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical. Affected is the function bill. The manipulation of the argument Item Code leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The explo...
CVE-2025-4061
A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function additem. The manipulation of the argument st.productname leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has bee...
CVE-2025-4061
A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function additem. The manipulation of the argument st.productname leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has bee...
CVE-2025-4061
The CVE-2025-4061 entry applies to code-projects Clothing Store Management System (version up to 1.0). The vulnerability is in the add_item function where manipulation of the st.productname argument causes a stack-based buffer overflow. The issue is exploitable with local access, and public explo...
CVE-2025-4061 code-projects Clothing Store Management System add_item stack-based overflow
A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function additem. The manipulation of the argument st.productname leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has bee...
CVE-2025-4061 code-projects Clothing Store Management System add_item stack-based overflow
A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function additem. The manipulation of the argument st.productname leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has bee...
๐ Clothing Store Management System 1.0 SQL Injection
Clothing Store Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Titles: Clothing Store Management System-1.0 SQLi Bypass Authentication Author: nu11secur1ty Date: 04/22/2025 Vendor: https://github.com/oretnom23 Software:...
CVE-2022-4229
A vulnerability classified as critical was found in SourceCodester Book Store Management System 1.0. This vulnerability affects unknown code of the file /bsmsci/index.php. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2024-7898
A vulnerability classified as critical was found in Tosei Online Store Management System ใใใๅบ่็ฎก็ใทในใใ 4.02/4.03/4.04. This vulnerability affects unknown code of the component Backend. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been...
Tosei Online Store Management System ๅฎๅ จๆผๆด
Tosei Online Store Management System is an online store management system from Tosei. A security vulnerability exists in TOSEI online store management system version v4.02, v4.03 and v4.04. An attacker can exploit the vulnerability to read arbitrary files on the server running the application...
CVE-2024-7898
A vulnerability classified as critical was found in Tosei Online Store Management System ใใใๅบ่็ฎก็ใทในใใ 4.02/4.03/4.04. This vulnerability affects unknown code of the component Backend. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been...
CVE-2024-7897 Tosei Online Store Management System ใใใๅบ่็ฎก็ใทในใใ tosei_kikai.php command injection
A vulnerability classified as critical has been found in Tosei Online Store Management System ใใใๅบ่็ฎก็ใทในใใ 4.02/4.03/4.04. This affects an unknown part of the file /cgi-bin/toseikikai.php. The manipulation of the argument kikaibangou leads to command injection. It is possible to initiate the attac...
Cross site scripting
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...
Cross site scripting
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...
Improper access control
Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...
CVE-2023-49540
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...
CVE-2023-49539
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...