Lucene search
+L

22 matches found

NVD
NVD
•added 2026/11/05 2:17 p.m.•5 views

CVE-2026-123028

A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /adminedit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...

7.5CVSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/11/05 2:00 p.m.•6 views

CVE-2026-123028 itsourcecode Online Book Store admin_edit.php sql injection

A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /adminedit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...

7.5CVSS
SaveExploits0References6
EUVD
EUVD
•added 2026/11/05 2:00 p.m.•3 views

EUVD-2026-117471

A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /adminedit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...

7.5CVSS7.2AI score
SaveExploits0References6
CVE
CVE
•added 2026/11/05 2:00 p.m.•5 views

CVE-2026-123028

A SQL injection vulnerability exists in the itsourcecode Online Book Store 1.0 application. The flaw is located within an unknown functionality of the /admin_edit.php file, where the manipulation of the bookisbn argument allows for remote attack initiation. The documents indicate that an exploit ...

7.5CVSS7.2AI score
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-11016

Malware in sbrugna...

9.8CVSS8.6AI score0.01944EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-48120

Malicious code in bioql PyPI...

8.8CVSS8AI score0.01488EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/22 3:56 p.m.•22 views

CVE-2020-19109

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...

9.8CVSS8.8AI score0.01944EPSS
SaveExploits1
Cvelist
Cvelist
•added 2023/09/28 8:48 p.m.•43 views

CVE-2023-43740 Online Book Store Project v1.0 - Insecure File Upload

Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of adminedit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

8.8CVSS9AI score0.01488EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/28 12:00 a.m.•6 views

CVE-2023-43740: Unrestricted Upload of File with Dangerous Type

Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of adminedit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

8.8CVSS7.9AI score0.01488EPSS
SaveExploits1References3
NVD
NVD
•added 2021/05/06 1:15 p.m.•22 views

CVE-2020-19109

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...

9.8CVSS0.01944EPSS
SaveExploits1References1
Prion
Prion
•added 2021/05/06 1:15 p.m.•26 views

Sql injection

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...

7.5CVSS9.8AI score0.01944EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/05/05 9:20 p.m.•7 views

CVE-2020-19109

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...

9.8CVSS0.01944EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/05 12:00 a.m.•7 views

CVE-2020-19109: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...

9.8CVSS6.5AI score0.01944EPSS
SaveExploits1References2
NVD
NVD
•added 2015/01/01 11:59 a.m.•30 views

CVE-2011-5302

Cross-site request forgery CSRF vulnerability in adm/adminedit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials...

6.8CVSS7.1AI score0.00609EPSS
SaveExploits1References1
CVE
CVE
•added 2015/01/01 11:00 a.m.•74 views

CVE-2011-5302

PHPDug 2.0.0 is affected by CVE-2011-5302, a CSRF flaw in adm/admin_edit.php that can allow an attacker to hijack administrator sessions and modify credentials. Root cause is a Cross-site request forgery vulnerability in the admin_edit.php endpoint. Multiple sources document the affected componen...

6.8CVSS7.3AI score0.00609EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/01 12:00 a.m.•13 views

CVE-2011-5302: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in adm/adminedit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials...

6.8CVSS5.9AI score0.00609EPSS
SaveExploits1References2
securityvulns
securityvulns
•added 2011/05/08 12:00 a.m.•94 views

HTB22971: XSRF (CSRF) in PHPDug

Vulnerability ID: HTB22971 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpdug.html Product: PHPDug Vendor: Kubelabs.com http://www.kubelabs.com/ Vulnerable Version: 2.0.0 and probably prior versions Vendor Notification: 21 April 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Ri...

7AI score
SaveExploits0
myhack58
myhack58
•added 2011/05/07 12:00 a.m.•39 views

PHPDug CSRF/XSS multiple vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: PHPDug 2.0.0 cross-site request forgery vulnerabilityCSRFandXSScross-site vulnerability, successfully exploited this vulnerability could cause the application of a compromise, and cookie-based authentication credentials, disclosure or theft of sensitive data is modified...

0.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/05 12:00 a.m.•9 views

CVE-2009-2333: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the menu parameter to admin/adminmenu.php, and the id parameter to 2 index.php and 3 admin/adminedit.php; and 4 delete arbitrary...

7.5CVSS6.2AI score0.05927EPSS
SaveExploits1References2
seebug.org
seebug.org
•added 2009/07/03 12:00 a.m.•21 views

CMS Chainuk <= 1.2 Multiple Remote Vulnerabilities

No description provided by source. CMS Chainuk = v.1.2 Vulns Home: Cms.tut.su Dork: "Cms.tut.su, 2009 g." eLwauxc 14.06.2 LFI /index.php --------------------------------------------------------------------------- 6: if isset$GET 'id' 7: 8: color=white$id = $GET 'id';/color 9: 10: else 11: 12: $id...

7.1AI score
SaveExploits0
Rows per page
Query Builder