15 matches found
EUVD-2025-2046
Malicious code in bioql PyPI...
EUVD-2024-33385
Malicious code in bioql PyPI...
CVE-2024-10844
A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file search.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-10996
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/processcategoryedit.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-10968
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /contactprocess.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotel...
CVE-2024-13002
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /orderprocess.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotely...
CVE-2024-13002 1000 Projects Bookstore Management System order_process.php sql injection
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /orderprocess.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotely...
CVE-2024-11673
A vulnerability, which was classified as problematic, has been found in 1000 Projects Bookstore Management System 1.0. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the publ...
CVE-2024-10998
CVE-2024-10998 affects 1000 Projects Bookstore Management System 1.0. A vulnerability in the admin file /admin/process_category_add.php allows manipulation of the cat parameter, causing SQL injection. The issue can be triggered remotely and has been disclosed publicly. Mitigation options document...
CVE-2024-10996
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/processcategoryedit.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-10997
CVE-2024-10997 affects 1000 Projects Bookstore Management System 1.0. The issue is an SQL injection in the file /book_list.php via manipulation of the id parameter. A remote attacker can exploit this, and public disclosure of the exploit is noted. Documented impact is high for confidentiality, in...
CVE-2024-10996
CVE-2024-10996 affects 1000 Projects Bookstore Management System v1.0. The vulnerability is an SQL injection in /admin/process_category_edit.php, triggered by manipulating the cat parameter. The issue is exploitable remotely and reportedly has had a public exploit disclosure. Multiple connected s...
CVE-2024-10969
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/loginprocess.php of the component Login. The manipulation of the argument unm/pwd leads to sql injection. The attack m...
CVE-2024-10968
CVE-2024-10968 affects 1000 Projects Bookstore Management System v1.0, specifically the /contact_process.php file. The vulnerability is triggered by manipulating the fnm parameter, leading to SQL injection. Exploitation is remote and has been disclosed publicly. Several connected sources corrobor...
CVE-2024-10844
A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file search.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...