Approved changes feed: RSS · Atom

cpe:2.3:a:book_store_management_system_project:book_store_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorBook Store Management System Project (6c54f16e-e66b-5fe3-848c-1f0d5dbd5c6e)
ProductBook Store Management System (7d391402-433c-5693-90a9-9cfff8b7e758)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49543 vulnerable 2026-06-08 06:14:29.158331 Details available
Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating.
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-28T19:55:35.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49540 vulnerable 2026-06-08 06:14:29.157679 Details available
Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter.
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-06T15:23:44.045Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23024 vulnerable 2026-06-08 05:54:27.732679 Details available
Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter.
Published: 2023-01-20T00:00:00.000Z
Updated: 2025-04-03T14:56:39.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4229 vulnerable 2026-06-08 05:51:37.012524 SourceCodester Book Store Management System index.php access control
HIGH (7.3)
A vulnerability classified as critical was found in SourceCodester Book Store Management System 1.0. This vulnerability affects unknown code of the file /bsms_ci/index.php. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214588.
Published: 2022-11-30T00:00:00.000Z
Updated: 2025-04-14T15:55:30.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4228 vulnerable 2026-06-08 05:51:37.011980 SourceCodester Book Store Management System information disclosure
MEDIUM (5.3)
A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affects an unknown part of the file /bsms_ci/index.php/user/edit_user/. The manipulation of the argument password leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214587.
Published: 2022-11-30T00:00:00.000Z
Updated: 2024-11-19T20:36:26.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45613 vulnerable 2026-06-08 05:50:36.542067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45225 vulnerable 2026-06-08 05:50:35.954868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45215 vulnerable 2026-06-08 05:50:35.948109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44097 vulnerable 2026-06-08 05:49:35.286995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3453 vulnerable 2026-06-08 05:48:21.092767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3452 vulnerable 2026-06-08 05:48:21.092376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.