CVE-2022-45217

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System User module...

CVE-2022-45217

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System User module...

Cross site scripting

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System User module...

CVE-2022-45010

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

CVE-2022-45010

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

Sql injection

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

Simple Phone Book/Directory Web App SQL注入漏洞

Simple Phone book/directory Web App is a simple phone book/directory web application by bakhtiar individual developer. A security vulnerability exists in Simple Phone Book/Directory Web App v1.0, which was discovered to contain an SQL injection vulnerability via the editid parameter of...

CVE-2022-45010

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

PT-2022-27366 · Unknown · Simple Phone Book/Directory Web App

Name of the Vulnerable Software and Affected Versions: Simple Phone Book/Directory Web App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the editid parameter at the "/PhoneBook/edit.php" API endpoint. Recommendations: For...

Book Store Management System 跨站脚本漏洞

Book Store Management System is an online bookstore system by Carlo Montero Personal Developer. A security vulnerability exists in Book Store Management System v1.0.0. An attacker can exploit this vulnerability by injecting a specially crafted payload into the Level parameter under the Add New...

CVE-2022-45010

CVE-2022-45010 affects the “Simple Phone Book/Directory Web App v1.0.” The vulnerability is a SQL injection exposed via the editid parameter on the endpoint /PhoneBook/edit.php. The available metrics list a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required,...

CVE-2022-45010

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit.php...

CVE-2022-45217

CVE-2022-45217 affects Book Store Management System v1.0.0, with a cross-site scripting (XSS) vulnerability exploitable via a crafted payload in the Level parameter of the Add New System User module. The vulnerability allows execution of arbitrary web scripts/HTML as part of user input handling, ...

PT-2022-27439 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System User module...

CVE-2022-45217

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System User module...

CVE-2022-3856

The Comic Book Management System WordPress plugin before 2.2.0 does not sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...

CVE-2022-3856

Summary: CVE-2022-3856 affects the WordPress plugin “Comic Book Management System” prior to version 2.2.0. The issue is a SQL injection caused by not sanitizing/escaping a parameter before it is used in a SQL statement, enabling exploitation by users with a role as low as Admin (no user interacti...

CVE-2022-3856 Comic Book Management System < 2.2.0 - Admin+ SQLi

The Comic Book Management System WordPress plugin before 2.2.0 does not sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...

PT-2022-24455 · WordPress · Comic Book Management System

Name of the Vulnerable Software and Affected Versions: The Comic Book Management System WordPress plugin versions prior to 2.2.0 Description: The issue is related to a SQL injection that occurs because a parameter is not properly sanitized and escaped before being used in a SQL statement. This ca...

WordPress plugin Comic Book Management System SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...