22 matches found
CVE-2026-123028
A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /adminedit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...
CVE-2026-123028 itsourcecode Online Book Store admin_edit.php sql injection
A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /adminedit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...
EUVD-2026-117471
A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /adminedit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...
CVE-2026-123028
A SQL injection vulnerability exists in the itsourcecode Online Book Store 1.0 application. The flaw is located within an unknown functionality of the /admin_edit.php file, where the manipulation of the bookisbn argument allows for remote attack initiation. The documents indicate that an exploit ...
EUVD-2020-11016
Malware in sbrugna...
EUVD-2023-48120
Malicious code in bioql PyPI...
CVE-2020-19109
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...
CVE-2023-43740 Online Book Store Project v1.0 - Insecure File Upload
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of adminedit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...
CVE-2023-43740: Unrestricted Upload of File with Dangerous Type
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of adminedit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...
CVE-2020-19109
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...
Sql injection
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...
CVE-2020-19109
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...
CVE-2020-19109: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...
CVE-2011-5302
Cross-site request forgery CSRF vulnerability in adm/adminedit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials...
CVE-2011-5302
PHPDug 2.0.0 is affected by CVE-2011-5302, a CSRF flaw in adm/admin_edit.php that can allow an attacker to hijack administrator sessions and modify credentials. Root cause is a Cross-site request forgery vulnerability in the admin_edit.php endpoint. Multiple sources document the affected componen...
CVE-2011-5302: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in adm/adminedit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials...
HTB22971: XSRF (CSRF) in PHPDug
Vulnerability ID: HTB22971 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpdug.html Product: PHPDug Vendor: Kubelabs.com http://www.kubelabs.com/ Vulnerable Version: 2.0.0 and probably prior versions Vendor Notification: 21 April 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Ri...
PHPDug CSRF/XSS multiple vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: PHPDug 2.0.0 cross-site request forgery vulnerabilityCSRFandXSScross-site vulnerability, successfully exploited this vulnerability could cause the application of a compromise, and cookie-based authentication credentials, disclosure or theft of sensitive data is modified...
CVE-2009-2333: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the menu parameter to admin/adminmenu.php, and the id parameter to 2 index.php and 3 admin/adminedit.php; and 4 delete arbitrary...
CMS Chainuk <= 1.2 Multiple Remote Vulnerabilities
No description provided by source. CMS Chainuk = v.1.2 Vulns Home: Cms.tut.su Dork: "Cms.tut.su, 2009 g." eLwauxc 14.06.2 LFI /index.php --------------------------------------------------------------------------- 6: if isset$GET 'id' 7: 8: color=white$id = $GET 'id';/color 9: 10: else 11: 12: $id...