Vulnerabilities

TI-2023-27047 CVE-2023-49543 · GHSA-4rp7-pgv4-j9jj

Incorrect access control in Book Store Management System v1 allows attackers to access…

HIGH 82

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00963 Published 2024-03-01 No fix listed CWE-284

TI-2023-09123 CVE-2023-23024 · GHSA-g2vp-6hw3-xhr4

Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS)…

MEDIUM 60

Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00428 Published 2023-01-20 No fix listed CWE-79

TI-2022-22509 CVE-2022-45613 · GHSA-w4pj-7rh2-rxw2

Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS)…

MEDIUM 58

Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00464 Published 2023-01-18 No fix listed CWE-79

TI-2022-22275 CVE-2022-45217 · GHSA-jpwg-5xwr-crpf

A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows…

MEDIUM 58

A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00575 Published 2022-12-07 No fix listed CWE-79

TI-2022-22274 CVE-2022-45215 · GHSA-pqff-fvx9-9qrh

A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows…

LOW 25

A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00416 Published 2022-12-02 No fix listed CWE-79

TI-2022-21681 CVE-2022-44097 · GHSA-6r63-93f2-chm5

Book Store Management System v1.0 was discovered to contain hardcoded credentials which…

HIGH 76

Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00817 Published 2022-11-30 No fix listed CWE-798

TI-2022-03872 CVE-2022-4229 · GHSA-39xh-x2wj-8255

SourceCodester Book Store Management System index.php access control

HIGH 81

A vulnerability classified as critical was found in SourceCodester Book Store Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00977 Published 2022-11-30 No fix listed CWE-284

TI-2022-03871 CVE-2022-4228 · GHSA-83xp-fg77-xfqq

SourceCodester Book Store Management System information disclosure

HIGH 72

A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01367 Published 2022-11-30 No fix listed CWE-200

TI-2022-22280 CVE-2022-45225 · GHSA-vgp5-qc33-722h

Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS)…

LOW 28

Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00525 Published 2022-11-25 No fix listed CWE-79

TI-2022-03190 CVE-2022-3453 · GHSA-xjq5-x7qp-g55g

SourceCodester Book Store Management System transcation.php cross site scripting

LOW 25

A vulnerability was found in SourceCodester Book Store Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00431 Published 2022-10-11 No fix listed CWE-707

TI-2022-03189 CVE-2022-3452 · GHSA-w4gj-6c79-5g8h

SourceCodester Book Store Management System category.php cross site scripting

LOW 25

A vulnerability was found in SourceCodester Book Store Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00478 Published 2022-10-11 No fix listed CWE-707

Vulnerabilities

Filters