3 matches found
CVE-2025-10833: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed a...
CVE-2024-55496: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of addcompany.php. Actions on the delete parameter result in SQL injection...
CVE-2024-55496
The 1000projects Bookstore Management System PHP MySQL Project version 1.0 is vulnerable to SQL injection due to improper neutralization of special elements. The flaw exists within an unknown functionality of the add_company.php file, specifically triggered by actions on the delete parameter. Exp...