CVE-2025-3964 withstars Books-Management-System Article del cross-site request forgery

A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an unknown function of the file /api/article/del of the component Article Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

CVE-2025-3964

withstars Books-Management-System 1.0 is vulnerable in the Article Handler’s /api/article/del endpoint to cross-site request forgery (CSRF). The unknown function of this API is manipulated to trigger CSRF, potentially allowing remote exploitation. Public exploitation is noted in the sources, and ...

CVE-2025-3964 withstars Books-Management-System Article del cross-site request forgery

A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an unknown function of the file /api/article/del of the component Article Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

CVE-2025-3963

A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiate...

CVE-2025-3963

A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiate...

CVE-2025-3961

A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-3962

A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects unknown code of the file /api/comment/add of the component Comment Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated...

CVE-2025-3961

A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-3962 withstars Books-Management-System Comment add cross site scripting

A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects unknown code of the file /api/comment/add of the component Comment Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated...

CVE-2025-3962

The CVE-2025-3962 entry affects withstars Books-Management-System 1.0, specifically the /api/comment/add endpoint in the Comment Handler. A cross-site scripting flaw is triggered by manipulating the content argument, enabling remote exploitation. Multiple sources confirm the vulnerability and not...

CVE-2025-3961

CVE-2025-3961 concerns withstars Books-Management-System v1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /admin/article/add/do endpoint, triggered by manipulating the Title parameter. Exploitation can be initiated remotely; multiple sources confirm the issue affects an unmaint...

CVE-2025-3961 withstars Books-Management-System do cross site scripting

A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-3960

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched...

CVE-2025-3960

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched...

CVE-2025-3960

CVE-2025-3960 affects withstars Books-Management-System 1.0. The vulnerability is in the file /allreaders.html of the Background Interface, where missing authorization enables remote access. Exploitation is possible over the network and has been publicly disclosed. The issue is associated with pr...

CVE-2025-3960 withstars Books-Management-System Background Interface allreaders.html authorization

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched...

CVE-2025-3959

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /readerdelete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploi...

CVE-2025-3959

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /readerdelete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploi...

CVE-2025-3959 withstars Books-Management-System reader_delete.html cross-site request forgery

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /readerdelete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploi...

CVE-2025-3958

CVE-2025-3958 affects withstars Books-Management-System 1.0. The vulnerability resides in an unknown function of the file /book_edit_do.html in the Book Edit Page, where manipulation of the Name parameter triggers cross-site scripting (XSS). It is described as remotely exploitable and publicly di...