Gaurav Kumar

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Book Store System version 1.0 **Description** An issue exists in the User Management Module where improper processing of the `Name/Username` argument allows for remote cross-site scripting (XSS). Cross-site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Book Store System version 1.0 **Description** A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries, by manipulating the `Username` variable. This issue occurs within the 'admin/login.php' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Outlook for Android (affected versions not specified) **Description** A spoofing issue exists in the way Microsoft Outlook for Android parses specifically crafted email messages. This can allow a remote attacker to perform cross-site scripting attacks using a specially crafted email message. The vulnerability is related to errors in the representation of information by the user interface. Exploitation of the vulnerability may enable an attacker to launch a script in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.