Cross site scripting

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument categoryname leads to cross site scripting. The attack can be initiated remotely...

Cross site scripting

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /transcation.php. The manipulation of the argument buyername leads to cross site scripting. The attack may be initiated remotely...

PT-2022-26326 · Unknown · Merchandise Online Store

Name of the Vulnerable Software and Affected Versions: Merchandise Online Store version 1.0 Description: A Vertical Privilege Escalation issue allows an attacker to gain access to the admin dashboard. Recommendations: For Merchandise Online Store version 1.0, at the moment, there is no informatio...

CVE-2022-42236

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...

Merchandise Online Store 安全漏洞

Merchandise Online Store is a Merchandise Online Store system by Carlo Montero Personal Developer. A security vulnerability exists in Merchandise Online Store version v.1.0, which stems from a vertical privilege escalation issue that allows an attacker to access the administrative dashboard...

CVE-2022-3452

The CVE-2022-3452 entry relates to SourceCodester Book Store Management System 1.0. The vulnerability exists in an unknown portion of the code, specifically /category.php, where manipulation of the category_name parameter enables cross-site scripting. Attacks are described as remote, with impact ...

CVE-2022-3453 SourceCodester Book Store Management System transcation.php cross site scripting

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /transcation.php. The manipulation of the argument buyername leads to cross site scripting. The attack may be initiated remotely...

Book Store Management System 1.0 安全漏洞

Book Store Management System is an online bookstore system by Carlo Montero, an individual developer. A security vulnerability exists in Book Store Management System version 1.0, which is a cross-site scripting vulnerability due to manipulation of the categoryname parameter...

CVE-2022-42238

A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard...

PT-2022-22187 · Sourcecodester · Sourcecodester Book Store Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Book Store Management System version 1.0 Description: A vulnerability was found in the SourceCodester Book Store Management System. It affects the file /category.php, where the manipulation of the category name argument leads t...

CVE-2022-42238

CVE-2022-42238 describes a vertical privilege escalation in Merchandise Online Store v1.0 that allows an attacker to access the admin dashboard. Connected sources corroborate the impact but do not provide concrete technical details about the root cause, affected components, or a confirmed fix. Af...

CVE-2022-42236

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...

CVE-2022-3452 SourceCodester Book Store Management System category.php cross site scripting

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument categoryname leads to cross site scripting. The attack can be initiated remotely...

CVE-2022-42236

CVE-2022-42236 affects Merchandise Online Store v1.0. A Stored XSS issue exists in the edit account form that allows injection of arbitrary JavaScript. The vulnerability is documented across multiple sources (NVD/Red Hat/CVE listings) and is associated with a MEDIUM base score (CVSSv3.1: AV:N/AC:...

CVE-2022-3453

CVE-2022-3453 affects SourceCodester Book Store Management System 1.0. The issue is a cross-site scripting vulnerability triggered by manipulation of the buyer_name parameter in /transcation.php, potentially exploitable remotely. Root cause: unvalidated input in a server-side script leading to re...

Merchandise Online Store 跨站脚本漏洞

Merchandise Online Store is a Merchandise Online Store system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Merchandise Online Store v.1.0, which stems from a stored XSS issue that allows arbitrary JavaScript to be injected in the form of an edit account...

CVE-2022-3452 SourceCodester Book Store Management System category.php cross site scripting

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument categoryname leads to cross site scripting. The attack can be initiated remotely...

Book Store Management System 安全漏洞

Book Store Management System is an online bookstore system by Carlo Montero, an individual developer. A security vulnerability exists in Book Store Management System version 1.0, which is a cross-site scripting vulnerability due to manipulation of the buyername parameter...

PT-2022-26324 · Unknown · Merchandise Online Store

Name of the Vulnerable Software and Affected Versions: Merchandise Online Store version 1.0 Description: A Stored XSS issue allows the injection of arbitrary JavaScript in the edit account form. Recommendations: For version 1.0, update the edit account form to properly sanitize user input and...

Huawei EulerOS: Security Advisory for libdb (EulerOS-SA-2022-2511)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...