CVE-2023-49543

CVE-2023-49543 Book Store Management System v1.0 - 不正なアクセス制御 説明 : Book Store Management System v1 における不適切なアクセス制御により、攻撃者は認証なしで権限のないページにアクセスし、管理機能を実行できます。 脆弱な製品バージョン : Book Store Management System v1.0 CVE作成者 : Geraldo Alcântara 日付 : 29/11/2023 確認日 : 15/12/2023 CVE : CVE-2023-49543 テスト環境 : Windows ...

CVE-2023-49540

CVE-2023-49540 Book Store Management System v1.0 - /index.php/history にクロスサイトスクリプティング（XSS）の脆弱性 - 脆弱なフィールド: "顧客名" 説明 : Book Store Management System v1.0 に、/bsmsci/index.php/history にクロスサイトスクリプティング（XSS）の脆弱性が含まれていることが発見されました。ペイロードは /bsmsci/index.php/transaction...

CVE-2023-49539

CVE-2023-49539 Book Store Management System v1.0 - クロスサイトスクリプティング（XSS）の脆弱性が「index.php/category」に存在 - 脆弱フィールド：「カテゴリ名」 説明 : Book Store Management System v1.0...

CVE-2023-49540

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...

CVE-2023-49539

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

EUVD-2022-47048

Malicious code in bioql PyPI...

EUVD-2022-48477

Malicious code in bioql PyPI...

EUVD-2022-48115

Malicious code in bioql PyPI...

EUVD-2022-42826

Malicious code in bioql PyPI...

EUVD-2022-51587

Malicious code in bioql PyPI...

EUVD-2022-48117

Malicious code in bioql PyPI...

EUVD-2022-48125

Malicious code in bioql PyPI...

EUVD-2022-51588

Malicious code in bioql PyPI...

EUVD-2023-27124

Malicious code in bioql PyPI...

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

CVE-2023-23024

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...

CVE-2022-3452

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument categoryname leads to cross site scripting. The attack can be initiated remotely...

CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

CVE-2022-45215

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System User module...

CVE-2022-45225

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the booktitle parameter...