554 matches found
CVE-2024-2269 keerti1924 Online-Book-Store-Website search.php sql injection
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The...
CVE-2024-2269 keerti1924 Online-Book-Store-Website search.php sql injection
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The...
CVE-2024-2269
CVE-2024-2269 affects keerti1924 Online-Book-Store-Website 1.0. The vulnerability is in the /search.php file where the search parameter is manipulated to cause SQL injection. It can be exploited remotely, and the exploit has been disclosed publicly. The CVSS metrics across sources indicate high s...
CVE-2024-2268
CVE-2024-2268 affects the keerti1924 Online-Book-Store-Website 1.0. The vulnerability is tied to an unrestricted upload via the file /product_update.php?update=1, specifically manipulating the argument update_image. This leads to remote execution potential. Public exploit information is present; ...
CVE-2024-2268 keerti1924 Online-Book-Store-Website unrestricted upload
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been classified as critical. Affected is an unknown function of the file /productupdate.php?update=1. The manipulation of the argument updateimage leads to unrestricted upload. It is possible to launch the attack...
CVE-2024-2267
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...
CVE-2024-2267
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...
Design/Logic Flaw
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...
CVE-2024-2267
CVE-2024-2267 affects the keerti1924 Online-Book-Store-Website, version 1.0. The issue is a logic error in the processing of the file /shop.php, caused by manipulating the argument product_price which leads to business logic errors. A remote attacker could exploit this, and public disclosures exi...
CVE-2024-2267 keerti1924 Online-Book-Store-Website shop.php logic error
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...
CVE-2024-2267 keerti1924 Online-Book-Store-Website shop.php logic error
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...
Online-Book-Store-Website SQL Injection Vulnerability
Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from a SQL injection vulnerability in the productname parameter of the /home.php file...
Online-Book-Store-Website Cross-Site Scripting Vulnerability
Online-Book-Store-Website is an online bookstore website. A cross-site scripting vulnerability exists in Online-Book-Store-Website version 1.0, which originates from a cross-site scripting vulnerability in the name parameter of the /signup.php file...
CVE-2024-2271: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...
CVE-2024-2272: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. The attack can be initiated...
CVE-2024-2270: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /signup.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The...
CVE-2024-2268: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been classified as critical. Affected is an unknown function of the file /productupdate.php?update=1. The manipulation of the argument updateimage leads to unrestricted upload. It is possible to launch the attack...
Online-Book-Store-Website SQL Injection Vulnerability
Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from an SQL injection vulnerability in the productname parameter of the /shop.php file...
Online-Book-Store-Website Security Vulnerability
Online-Book-Store-Website is an online bookstore website. A security vulnerability exists in Online-Book-Store-Website version 1.0, which is caused by a business logic error in the productprice parameter of the /shop.php file...
CVE-2024-2267: Undefined Security Weakness
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...