Lucene search
+L

3462 matches found

CVE
CVE
added 2024/03/07 10:00 p.m.84 views

CVE-2024-2267

CVE-2024-2267 affects the keerti1924 Online-Book-Store-Website, version 1.0. The issue is a logic error in the processing of the file /shop.php, caused by manipulating the argument product_price which leads to business logic errors. A remote attacker could exploit this, and public disclosures exi...

7.5CVSS4.6AI score0.00518EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/07 10:00 p.m.47 views

CVE-2024-2267 keerti1924 Online-Book-Store-Website shop.php logic error

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...

4.3CVSS5AI score0.00518EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/03/07 10:00 p.m.19 views

CVE-2024-2267 keerti1924 Online-Book-Store-Website shop.php logic error

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...

4.3CVSS6.8AI score0.00518EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.12 views

Online-Book-Store-Website SQL Injection Vulnerability

Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from a SQL injection vulnerability in the productname parameter of the /home.php file...

9.8CVSS7.9AI score0.00558EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.11 views

Online-Book-Store-Website Cross-Site Scripting Vulnerability

Online-Book-Store-Website is an online bookstore website. A cross-site scripting vulnerability exists in Online-Book-Store-Website version 1.0, which originates from a cross-site scripting vulnerability in the name parameter of the /signup.php file...

6.1CVSS6.2AI score0.00552EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.31 views

Online-Book-Store-Website SQL Injection Vulnerability

Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from an SQL injection vulnerability in the productname parameter of the /shop.php file...

9.8CVSS8AI score0.00558EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.11 views

Online-Book-Store-Website Security Vulnerability

Online-Book-Store-Website is an online bookstore website. A security vulnerability exists in Online-Book-Store-Website version 1.0, which is caused by a business logic error in the productprice parameter of the /shop.php file...

7.5CVSS6.8AI score0.00518EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.11 views

Online-Book-Store-Website SQL Injection Vulnerability

Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from a SQL injection vulnerability in the search parameter of the /search.php file...

9.8CVSS7.9AI score0.00558EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.32 views

openSUSE: Security Advisory for bluez (SUSE-SU-2024:0204-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS6.9AI score0.0229EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.21 views

openSUSE Security Advisory (SUSE-SU-2024:0183-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS7.2AI score0.0229EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.40 views

openSUSE: Security Advisory for bluez (SUSE-SU-2024:0182-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS6.9AI score0.0229EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/01 10:15 p.m.20 views

CVE-2023-49539

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

6.1CVSS5.9AI score0.00573EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2024/03/01 10:15 p.m.7 views

CVE-2023-49539

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

6.1CVSS6AI score0.00573EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2024/03/01 10:15 p.m.6 views

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

9.8CVSS5.8AI score0.00955EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/01 10:15 p.m.10 views

CVE-2023-49539

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

6.1CVSS5.9AI score0.00573EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2024/03/01 10:15 p.m.6 views

CVE-2023-49540

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...

6.1CVSS6AI score0.00573EPSS
SaveExploits1References5
OSV
OSV
added 2024/03/01 10:15 p.m.13 views

CVE-2023-49540

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...

6.1CVSS5.9AI score0.00573EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/01 10:15 p.m.11 views

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

9.8CVSS5.8AI score0.00955EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/01 10:15 p.m.18 views

Cross site scripting

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...

6.2AI score0.00573EPSS
SaveExploits1References4
Prion
Prion
added 2024/03/01 10:15 p.m.21 views

Improper access control

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

7.3AI score0.00955EPSS
SaveExploits1References3
Rows per page
Query Builder