CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

CVE-2023-49543

The Book Store Management System v1.0 is vulnerable to incorrect access control , which allows unauthenticated attackers to access unauthorized pages and execute administrative functions. Specifically, an attacker can access the /bsms_ci/index.php/user page to perform actions such as creating, ed...