CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

CVE-2022-45613

Book Store Management System v1.0 is affected by a cross-site scripting (XSS) vulnerability in the /bsms_ci/index.php/book endpoint, where the publisher parameter is injectable and can execute arbitrary HTML/JavaScript. The CVSSv3.1 base score is 5.4 (Medium) with attack vector Network, complexit...

PT-2023-14720 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /bsms ci/index.php/book endpoint and allows attackers to execute arbitrary web script...

Chrome JSNativeContextSpecialization::BuildElementAccess Bypass

Chrome: Copy-on-write check bypass in JSNativeContextSpecialization::BuildElementAccess VULNERABILITY DETAILS Copy-on-write is one of V8's internal optimization features that allows multiple JavaScript objects to share the same element store. This feature is primarily used to optimize creation of...

CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

Book Store Management System 跨站脚本漏洞

Book Store Management System is an online bookstore system. A security vulnerability exists in Book Store Management System v1.0, which stems from a cross-site scripting vulnerability in the /bsmsci/index.php/book page. No detailed vulnerability details are available at this time...

AZL-36987 CVE-2018-14628 affecting package samba 4.18.3-2

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store...

Samba 安全漏洞

Samba is a standard Windows interoperability program suite for Linux and Unix. Samba has a security vulnerability that stems from a lack of access control checks. An attacker could exploit the vulnerability to obtain the names and retained attributes of deleted objects in the LDAP store...

PT-2023-10245 · Unknown · Tynx Wuersch

Name of the Vulnerable Software and Affected Versions: tynx wuersch affected versions not specified Description: A critical issue was found in tynx wuersch, affecting the packValue/getByCustomQuery function of the file backend/base/Store.class.php. This issue leads to sql injection...

etcd 加密问题漏洞

etcd is a key-value storage system for distributed systems written in the Go language. A cryptographic issue vulnerability exists in etcd grpc-proxy, which stems from the presence of a 64-bit block cipher attack...

CVE-2022-46947

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

CVE-2022-46947

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

CVE-2022-46946

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletebrand...

CVE-2022-46949

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletehelmet...

CVE-2022-46946

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletebrand...

CVE-2022-46949

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletehelmet...

Sql injection

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

Sql injection

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletebrand...

Sql injection

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletehelmet...

PT-2023-15109 · Unknown · Helmet Store Showroom Site

Name of the Vulnerable Software and Affected Versions: Helmet Store Showroom Site version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete category" API endpoint. Recommendations:...