Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•12 views

CVE-2025-10833: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...

9.8CVSS6.9AI score0.00421EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/17 12:00 a.m.•230 views

CVE-2024-55496

The 1000projects Bookstore Management System PHP MySQL Project 1.0 contains a SQL injection vulnerability within the add_company.php file. The flaw is triggered by actions on the delete parameter, which allows an attacker to execute arbitrary SQL commands. Exploitation details are not provided in...

9.1CVSS7.7AI score0.00599EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/17 12:00 a.m.•6 views

CVE-2024-55496: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of addcompany.php. Actions on the delete parameter result in SQL injection...

9.1CVSS5.7AI score0.00599EPSS
SaveExploits1References1
Rows per page
Query Builder