CVE-2023-49540

CVE-2023-49540 Book Store Management System v1.0 - /index.php/history 存在跨站脚本（XSS）漏洞，漏洞字段：客户姓名 描述 ：发现 Book Store Management System v1.0 在 /bsmsci/index.php/history 页面存在跨站脚本（XSS）漏洞。攻击载荷被插入到 /bsmsci/index.php/transaction 页面的“客户姓名”字段。当访问 /bsmsci/index.php/history 页面时，载荷成功注入并生效。 受影响产品版本 ：Book Store...

CVE-2023-49543

CVE-2023-49543 Book Store Management System v1.0 - 不正确的访问控制 描述 ：Book Store Management System v1 中存在不正确的访问控制，允许攻击者访问未经授权的页面，并在未进行身份验证的情况下执行管理功能。 受影响产品版本 ：Book Store Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：2023年11月29日 确认日期 ：2023年12月15日 CVE ：CVE-2023-49543 测试环境 ：Windows 影响...

CVE-2023-49539

CVE-2023-49539 Book Store Management System v1.0 - 跨站脚本（XSS）漏洞在 "index.php/category" - 脆弱字段："Category Name" 描述 ：Book Store Management System v1.0 被发现存在跨站脚本（XSS）漏洞，位于 "/bsmsci/index.php/category"。此漏洞允许攻击者通过向 "Category Name" 字段注入特制载荷来执行任意 web 脚本或 HTML。 脆弱产品版本 ：Book Store Management System v1.0 CVE ...

CVE-2023-49540

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...

CVE-2023-49539

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

EUVD-2022-48477

Malicious code in bioql PyPI...

EUVD-2022-42826

Malicious code in bioql PyPI...

EUVD-2022-48115

Malicious code in bioql PyPI...

EUVD-2022-47048

Malicious code in bioql PyPI...

EUVD-2022-48117

Malicious code in bioql PyPI...

EUVD-2022-51587

Malicious code in bioql PyPI...

EUVD-2023-27124

Malicious code in bioql PyPI...

EUVD-2022-48125

Malicious code in bioql PyPI...

EUVD-2022-51588

Malicious code in bioql PyPI...

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

CVE-2023-23024

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...

CVE-2022-3452

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument categoryname leads to cross site scripting. The attack can be initiated remotely...

CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

CVE-2022-45215

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System User module...

CVE-2022-45225

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the booktitle parameter...