Vendors / Book Store Management System Project Book Store Management System Project Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 1
Exploited now Book Store Management System Project records in CISA KEV No Book Store Management System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00963 · Published 2024-03-01 · No fix listed CWE-284
Priority HIGH 81
A vulnerability classified as critical was found in SourceCodester Book Store Management System 1.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00977 · Published 2022-11-30 · No fix listed CWE-284
Priority HIGH 76
Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00817 · Published 2022-11-30 · No fix listed CWE-798
Priority HIGH 72
A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01367 · Published 2022-11-30 · No fix listed CWE-200
Priority MEDIUM 60
Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00428 · Published 2023-01-20 · No fix listed CWE-79
Priority MEDIUM 58
Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00464 · Published 2023-01-18 · No fix listed CWE-79
Priority MEDIUM 58
A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System…
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00575 · Published 2022-12-07 · No fix listed CWE-79
Priority LOW 28
Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00525 · Published 2022-11-25 · No fix listed CWE-79
Priority LOW 25
A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System…
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00416 · Published 2022-12-02 · No fix listed CWE-79
Priority LOW 25
A vulnerability was found in SourceCodester Book Store Management System 1.0.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00431 · Published 2022-10-11 · No fix listed CWE-707
Priority LOW 25
A vulnerability was found in SourceCodester Book Store Management System 1.0.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00478 · Published 2022-10-11 · No fix listed CWE-707
Open these records in search → All records by CVSS severity
3 1 7 0 0
THREATIST.IORead the docs