CVE-2022-45613

Book Store Management System v1.0 is affected by a cross-site scripting (XSS) vulnerability in the /bsms_ci/index.php/book endpoint, where the publisher parameter is injectable and can execute arbitrary HTML/JavaScript. The CVSSv3.1 base score is 5.4 (Medium) with attack vector Network, complexit...

CVE-2022-4229

The CVE-2022-4229 entry concerns SourceCodester Book Store Management System 1.0. A vulnerability exists in the unknown code path of /bsms_ci/index.php that leads to improper access controls. It is described as remotely initiatable with public disclosure of the exploit, and is rated high/critical...

CVE-2023-49543

CVE-2023-49543 concerns incorrect access control in the Book Store Management System v1. Multiple sources (NVD, Red Hat, CVE lists, PT Security entry) describe that attackers can reach unauthorized pages and perform administrative functions without authenticating. The vulnerability is tied to wea...

CVE-2022-45225

CVE-2022-45225 affects Book Store Management System v1.0. The vulnerability is a cross-site scripting (XSS) defect in the endpoint /bsms_ci/index.php/book , exploitable by injecting a crafted payload into the book_title parameter. The NVD/CVSS data shows a base score of 6.1 (Medium) with AV:N/AC:...

CVE-2022-4228

CVE-2022-4228 affects SourceCodester Book Store Management System 1.0, specifically the endpoint at /bsms_ci/index.php/user/edit_user/ where manipulating the password parameter leads to information disclosure. The flaw is exploitable remotely and the public disclosure of exploits is noted. Eviden...

CVE-2022-45217

CVE-2022-45217 affects Book Store Management System v1.0.0, with a cross-site scripting (XSS) vulnerability exploitable via a crafted payload in the Level parameter of the Add New System User module. The vulnerability allows execution of arbitrary web scripts/HTML as part of user input handling, ...

CVE-2022-3453

CVE-2022-3453 affects SourceCodester Book Store Management System 1.0. The issue is a cross-site scripting vulnerability triggered by manipulation of the buyer_name parameter in /transcation.php, potentially exploitable remotely. Root cause: unvalidated input in a server-side script leading to re...

CVE-2022-45215

CVE-2022-45215 affects Book Store Management System v1.0.0. An XSS vulnerability exists in the Name parameter of the Add New System User module, allowing attackers to inject arbitrary scripts/HTML. The CVSSv3.1 base score is 5.4 (Network, Low privileges, User interaction required). Exploitation d...

CVE-2022-3452

The CVE-2022-3452 entry relates to SourceCodester Book Store Management System 1.0. The vulnerability exists in an unknown portion of the code, specifically /category.php, where manipulation of the category_name parameter enables cross-site scripting. Attacks are described as remote, with impact ...

CVE-2022-44097

CVE-2022-44097 affects Book Store Management System v1.0. The vulnerability arises from hardcoded credentials in the system, enabling attackers to escalate privileges and gain access to the admin panel. This is supported by multiple connected sources (RH Red Hat, NVD, CNNVD and others) describing...

CVE-2023-23024

CVE-2023-23024 affects Book Store Management System v1.0. A cross-site scripting (XSS) flaw exists in the /bsms_ci/index.php/book endpoint, where an attacker can inject a crafted payload into the writer parameter to execute arbitrary web scripts or HTML. The vulnerability’s impact is limited to c...