CVE-2026-89022

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a different social provider sharing the same driverid namespace. Attackers can authenticate at...

CVE-2026-89022

BookStack before 26.05.5 is affected by an authentication bypass in its social login implementation. The root cause lies in SocialAuthService::handleLoginCallback , whose database query ignores the driver column when retrieving linked account records, allowing an unauthenticated attacker to authe...

PT-2026-92117

Name of the Vulnerable Software and Affected Versions BookStack versions prior to 26.05.5 Description An authentication bypass exists in the social login implementation. Unauthenticated attackers can sign in as arbitrary users by authenticating through a social provider that shares the same drive...

CodeAstro Car Rental System injection vulnerability

CodeAstro Car Rental System is a car rental system from CodeAstro. An injection vulnerability exists in CodeAstro Car Rental System version 1.0, which stems from an incorrect operation of the parameter driveridfromdropdown that can result in SQL injection...

inDrive: Stored XSS on promo.indrive.com

Vulnerability description not provided...

CVE-2021-23279

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in metadriversrv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete...

CVE-2021-23279

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in metadriversrv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete...