Information disclosure

A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affects an unknown part of the file /bsmsci/index.php/user/edituser/. The manipulation of the argument password leads to information disclosure. It is possible to initiate the attack...

Improper access control

A vulnerability classified as critical was found in SourceCodester Book Store Management System 1.0. This vulnerability affects unknown code of the file /bsmsci/index.php. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2022-4229 SourceCodester Book Store Management System index.php access control

A vulnerability classified as critical was found in SourceCodester Book Store Management System 1.0. This vulnerability affects unknown code of the file /bsmsci/index.php. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2022-4229 SourceCodester Book Store Management System index.php access control

A vulnerability classified as critical was found in SourceCodester Book Store Management System 1.0. This vulnerability affects unknown code of the file /bsmsci/index.php. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2022-4228 SourceCodester Book Store Management System information disclosure

A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affects an unknown part of the file /bsmsci/index.php/user/edituser/. The manipulation of the argument password leads to information disclosure. It is possible to initiate the attack...

CVE-2022-4229

The CVE-2022-4229 entry concerns SourceCodester Book Store Management System 1.0. A vulnerability exists in the unknown code path of /bsms_ci/index.php that leads to improper access controls. It is described as remotely initiatable with public disclosure of the exploit, and is rated high/critical...

CVE-2022-44097

Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

CVE-2022-4228

CVE-2022-4228 affects SourceCodester Book Store Management System 1.0, specifically the endpoint at /bsms_ci/index.php/user/edit_user/ where manipulating the password parameter leads to information disclosure. The flaw is exploitable remotely and the public disclosure of exploits is noted. Eviden...

CVE-2022-44097

Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

CVE-2022-45225

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the booktitle parameter...

CVE-2022-45225

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the booktitle parameter...

CVE-2022-45225

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the booktitle parameter...

CVE-2022-45225

CVE-2022-45225 affects Book Store Management System v1.0. The vulnerability is a cross-site scripting (XSS) defect in the endpoint /bsms_ci/index.php/book , exploitable by injecting a crafted payload into the book_title parameter. The NVD/CVSS data shows a base score of 6.1 (Medium) with AV:N/AC:...

CVE-2022-3453

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /transcation.php. The manipulation of the argument buyername leads to cross site scripting. The attack may be initiated remotely...

Cross site scripting

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /transcation.php. The manipulation of the argument buyername leads to cross site scripting. The attack may be initiated remotely...

CVE-2022-3453 SourceCodester Book Store Management System transcation.php cross site scripting

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /transcation.php. The manipulation of the argument buyername leads to cross site scripting. The attack may be initiated remotely...

CVE-2022-3452

The CVE-2022-3452 entry relates to SourceCodester Book Store Management System 1.0. The vulnerability exists in an unknown portion of the code, specifically /category.php, where manipulation of the category_name parameter enables cross-site scripting. Attacks are described as remote, with impact ...

CVE-2022-3453

CVE-2022-3453 affects SourceCodester Book Store Management System 1.0. The issue is a cross-site scripting vulnerability triggered by manipulation of the buyer_name parameter in /transcation.php, potentially exploitable remotely. Root cause: unvalidated input in a server-side script leading to re...

PT-2022-22187 · Sourcecodester · Sourcecodester Book Store Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Book Store Management System version 1.0 Description: A vulnerability was found in the SourceCodester Book Store Management System. It affects the file /category.php, where the manipulation of the category name argument leads t...

Gadget Store Management System 1.0 Shell Upload Vulnerability

Exploit Title: Gadget Store Management System 1.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Saud Alenazi Vendor Homepage: https://www.campcodes.com/ Software Link: https://www.campcodes.com/projects/php/gadget-store-management-system/ Version: 1.0 Tested on: XAMPP, Linux Contact...