100 matches found
CVE-2023-49539
CVE-2023-49539 Book Store Management System v1.0 - "index.php/category"에서의 사이트 간 스크립팅XSS 취약점 - 취약 필드: "Category Name" 설명 : Book Store Management System v1.0에서 "/bsmsci/index.php/category"에 사이트 간 스크립팅XSS 취약점이 발견되었습니다. 이 취약점으로 인해 공격자는 "category Name" 필드에 조작된 페이로드를 주입하여 임의의 웹 스크립트 또는 HTML을 실행할 수 있습니...
CVE-2023-49540
CVE-2023-49540 Book Store Management System v1.0 - /index.php/history 크로스 사이트 스크립팅XSS 취약점 - 취약 필드: '고객 이름'. 설명 : Book Store Management System v1.0에서 /bsmsci/index.php/history에 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 페이로드는 /bsmsci/index.php/transaction 페이지의 '고객 이름' 필드에 삽입됩니다. /bsmsci/index.php/history 페이지를...
CVE-2023-49543
CVE-2023-49543 Book Store Management System v1.0 - 부적절한 접근 제어 설명 : Book Store Management System v1에서 부적절한 접근 제어로 인해 공격자가 인증 없이 승인되지 않은 페이지에 접근하고 관리 기능을 실행할 수 있습니다. 취약한 제품 버전 : Book Store Management System v1.0 CVE 작성자 : Geraldo Alcântara 날짜 : 2023-11-29 확인일 : 2023-12-15 CVE : CVE-2023-49543 테스트 환...
CVE-2023-49540
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...
CVE-2023-49539
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...
EUVD-2022-48115
Malicious code in bioql PyPI...
EUVD-2022-42826
Malicious code in bioql PyPI...
EUVD-2022-47048
Malicious code in bioql PyPI...
EUVD-2022-48477
Malicious code in bioql PyPI...
EUVD-2022-51587
Malicious code in bioql PyPI...
EUVD-2022-48117
Malicious code in bioql PyPI...
EUVD-2022-51588
Malicious code in bioql PyPI...
EUVD-2023-27124
Malicious code in bioql PyPI...
EUVD-2022-48125
Malicious code in bioql PyPI...
CVE-2023-49543
Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...
CVE-2023-23024
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...
CVE-2022-3452
A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument categoryname leads to cross site scripting. The attack can be initiated remotely...
CVE-2022-45613
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...
CVE-2022-45215
A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System User module...
CVE-2022-45225
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the booktitle parameter...