50 matches found
Cross site scripting
A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely...
CVE-2023-7059
The CVE-2023-7059 entry concerns SourceCodester School Visitor Log e-Book 1.0. The vulnerability is a cross-site scripting flaw in the log-book.php file triggered by manipulating the Full Name parameter. The issue is exploitable remotely, with public disclosure reported. Connected documents confi...
CVE-2023-7059 SourceCodester School Visitor Log e-Book log-book.php cross site scripting
A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely...
CVE-2023-7059: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely...
Cross site scripting
A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects some unknown processing of the file endpoint/add-book.php. The manipulation of the argument Book Title/Book Author leads to cross site scripting. The attack may be initiated...
CVE-2023-6440 SourceCodester Book Borrower System add-book.php cross site scripting
A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects some unknown processing of the file endpoint/add-book.php. The manipulation of the argument Book Title/Book Author leads to cross site scripting. The attack may be initiated...
CVE-2023-6440: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects some unknown processing of the file endpoint/add-book.php. The manipulation of the argument Book Title/Book Author leads to cross site scripting. The attack may be initiated...
CVE-2022-2770 SourceCodester Simple Online Book Store System book.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to launch the attack remotely. VDB-206166 is...
CVE-2022-2747
A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...
Simple Online Book Store System SQL注入漏洞
Simple Online Book Store System is a simple online bookstore system by Carlo Montero, an individual developer. Simple Online Book Store System suffers from a SQL injection vulnerability that arises from an unknown function in its book.php component that improperly handles the parameter bookisbn,...
CVE-2022-2770: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to launch the attack remotely. VDB-206166 is...
PT-2022-18439 · Sourcecodester · Sourcecodester Simple Online Book Store System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Book Store affected versions not specified Description: A critical issue was found in the processing of the file book.php, where the manipulation of the book isbn argument leads to SQL injection. The attack can be...
Simple Online Book Store System SQL注入漏洞
Simple Online Book Store System is a simple online bookstore system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Online Book Store System, which originates from an unknown function in the file /obs/book.php, where manipulation of the parameter bookisbn can lead t...
CVE-2022-2747: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...
CVE-2020-19110
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code...
CVE-2020-19110: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code...
CSE Bookstore 1.0 - Multiple SQL Injection
Exploit Title : CSE Bookstore 1.0 - Multiple SQL Injection Date : 2020-12-21 Author : Musyoka Ian Version : CSE Bookstore 1.0 Vendor Homepage: https://projectworlds.in/ Platform : PHP Tested on : Debian CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR...
XSS Vulnerability in Hot Drama CMS v2.1
Hot Drama CMS is a movie and TV station building system developed by PHP+MySQL. A stored xss injection vulnerability exists in /wap/book.php in Hot Drama CMS v2.1, which can be exploited by attackers to obtain an administrator cookie...