Book Store Management System Security Vulnerability

Book Store Management System is an online bookstore system by Carlo Montero, a personal developer. A security vulnerability exists in Book Store Management System v1.0, which originates from a cross-site scripting vulnerability in the /bsmsci/index.php/category file...

Cross site scripting

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

PT-2022-21622

Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management System version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields in the /bsms/?page=manage account API endpoin...

CVE-2022-28063: Undefined Security Weakness

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products...

PT-2022-18789

Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management System version 1.0 Description The issue concerns a file disclosure vulnerability. It can be exploited via the "/bsms/?page=products" API endpoint. Recommendations For Simple Bakery Shop Management System version...