3 matches found
CVE-2025-10833: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...
CVE-2024-55496
The 1000projects Bookstore Management System PHP MySQL Project 1.0 contains a SQL injection vulnerability within the add_company.php file. The flaw is triggered by actions on the delete parameter, which allows an attacker to execute arbitrary SQL commands. Exploitation details are not provided in...
CVE-2024-55496: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of addcompany.php. Actions on the delete parameter result in SQL injection...