EUVD-2022-36053

Malicious code in bioql PyPI...

EUVD-2022-30063

Malicious code in bioql PyPI...

CVE-2023-1357

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads...

CVE-2022-32987

Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...

CVE-2022-28063

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

CVE-2022-25393

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2023-1357

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads...

Simple Bakery Shop Management SQL注入漏洞

Simple Bakery Shop Management is a bakery store management system. A SQL injection vulnerability exists in SourceCodester Simple Bakery Shop Management System version 1.0, which stems from a SQL injection vulnerability in the parameter sername/password...

CVE-2023-1357: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads...

CVE-2022-32987

CVE-2022-32987 concerns multiple cross-site scripting (XSS) vulnerabilities in Simple Bakery Shop Management System v1.0, specifically in the /bsms/?page=manage_account page. The issue arises from crafted input in the Username or Full Name fields, enabling execution of arbitrary web scripts/HTML....

CVE-2022-32987

Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...

PT-2022-21622

Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management System version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields in the /bsms/?page=manage account API endpoin...

CVE-2022-32987: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...

Bakery Shop Management System 1.0 SQL Injection Vulnerability

Title: Bakery Shop Management System 1.0 - Blind Time SQLi To Rce Author: Hejap Zairy Vendor: https://www.campcodes.com/projects/php/simple-bakery-shop-management-system/ Software: https://www.campcodes.com/wp-content/uploads/2022/02/bsms0.zip Reference: https://github.com/Matrix07ksa Tested on:...

CVE-2022-28063

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

Input validation

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

CVE-2022-28063

CVE-2022-28063 affects Simple Bakery Shop Management System v1.0. The issue is a file disclosure via /bsms/?page=products caused by insufficient access restrictions/filters, enabling an attacker to view leaked files and compromising confidentiality (C: High, I: None, A: None per docs). No explici...

CVE-2022-28063

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

PT-2022-18789

Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management System version 1.0 Description The issue concerns a file disclosure vulnerability. It can be exploited via the "/bsms/?page=products" API endpoint. Recommendations For Simple Bakery Shop Management System version...