Vulnerabilities

TI-2023-01282 CVE-2023-1357 · GHSA-27p4-hpxf-27x2

SourceCodester Simple Bakery Shop Management System Admin Login sql injection

MEDIUM 49

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00554 Published 2023-03-12 No fix listed CWE-89

TI-2022-14497 CVE-2022-32987 · GHSA-rwwr-9226-69hq

Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00544 Published 2022-06-23 No fix listed CWE-79

TI-2022-10887 CVE-2022-28063 · GHSA-p5fw-vpw3-w4rx

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.

LOW 25

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01168 Published 2022-04-04 No fix listed

Vulnerabilities

Filters

SourceCodester Simple Bakery Shop Management System Admin Login sql injection

Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of…

Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.