Book Store Management System 跨站脚本漏洞

Book Store Management System is an online bookstore system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Book Store Management System v1.0, which was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. An attacker could u...

CVE-2023-23024

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...

CVE-2023-23024

CVE-2023-23024 affects Book Store Management System v1.0. A cross-site scripting (XSS) flaw exists in the /bsms_ci/index.php/book endpoint, where an attacker can inject a crafted payload into the writer parameter to execute arbitrary web scripts or HTML. The vulnerability’s impact is limited to c...

PT-2023-18823 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: A cross-site scripting XSS issue was found in the /bsms ci/index.php/book endpoint, allowing attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the writ...

CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

CVE-2022-45613

Book Store Management System v1.0 is affected by a cross-site scripting (XSS) vulnerability in the /bsms_ci/index.php/book endpoint, where the publisher parameter is injectable and can execute arbitrary HTML/JavaScript. The CVSSv3.1 base score is 5.4 (Medium) with attack vector Network, complexit...

CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

PT-2023-14720 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /bsms ci/index.php/book endpoint and allows attackers to execute arbitrary web script...

Book Store Management System 跨站脚本漏洞

Book Store Management System is an online bookstore system. A security vulnerability exists in Book Store Management System v1.0, which stems from a cross-site scripting vulnerability in the /bsmsci/index.php/book page. No detailed vulnerability details are available at this time...

CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

Liquidation bots are needed to stabilize the system.

Lines of code Vulnerability details Impact Allowing liquidation bots to arbitrage would stabilize the system. The majority of liquidations are done by liquidation bots. For liquidation bots to be viable there has to exist a secondary market where the assets can be instantly sold. This is especial...

Address Book SQL注入漏洞

Address Book is an address table with an activity log. A SQL injection vulnerability exists in LearnMeSomeCodes Address Book. An attacker could use this vulnerability to perform a sql injection attack...

CVE-2014-125053

A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is...

Sql injection

A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is...

CVE-2014-125053

Affected software: Piwigo-Guest-Book (up to version 1.3.0) with vulnerability in the Navigation Bar component. Root cause: manipulation of the start argument in include/guestbook.inc.php enables SQL injection. Impact: potential unauthorized access/manipulation via SQL injection; CVSS vectors in s...

CVE-2014-125053 Piwigo-Guest-Book Navigation Bar guestbook.inc.php sql injection

A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is...

PT-2023-10123 · Piwigo · Piwigo-Guest-Book

Name of the Vulnerable Software and Affected Versions: Piwigo-Guest-Book versions up to 1.3.0 Description: A critical issue affects the Navigation Bar component, specifically the include/guestbook.inc.php file. The manipulation of the start argument leads to sql injection. Recommendations: For...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo Piwigo-Guest-Book version 1.3.0 and earlier versions suffer from a SQL injection vulnerability that stems from incorrect...

book-komiyama.co.jp Cross Site Scripting vulnerability OBB-3127341

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...