PT-2021-10285

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue allows a remote malicious user to execute arbitrary code via SQL Injection in the publisher parameter to the "edit book.php" API endpoint. This could potentially lead to unauthorized access...

PT-2021-10279

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue allows a remote malicious user to execute arbitrary code via SQL Injection in the isbn parameter to the "edit book.php" endpoint. This could potentially lead to unauthorized access and data...

PT-2018-12660

Name of the Vulnerable Software and Affected Versions XYCMS version 1.7 Description The issue is related to stored XSS in XYCMS, where a crafted request to add do.php can lead to an exploit. This is associated with the system/edit book.php and add book.php files. Recommendations For XYCMS version...