Lucene search
+L

528 matches found

Positive Technologies
Positive Technologies
•added 2023/09/28 12:00 a.m.•17 views

PT-2023-28958 · Online Book Store +1 · Online Book Store Project

Name of the Vulnerable Software and Affected Versions: Online Book Store Project affected versions not specified Description: The issue concerns the bookisbn parameter of the "cart.php" resource, which does not validate the characters received, sending them unfiltered to the database. This lack o...

9.8CVSS9.3AI score0.00805EPSS
SaveExploits1References10
Packet Storm
Packet Storm
•added 2023/04/26 12:00 a.m.•424 views

Online Book Store 1.0 SQL Injection

Exploit Title: Online Book Store 1.0 - process.php SQL injection Google Dork: 4/26/2023 Exploit Author: Or4nG.M4n Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-book-store-project-in-php/ Software Link:...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/03/30 12:00 a.m.•216 views

Book Store Management System 1.0.0 Cross Site Scripting

Exploit Title: Book Store Management System 1.0.0 - Stored Cross-Site Scripting XSS Date: 2022-11-08 Exploit Author: Rajeshwar Singh Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsmsci.zip Tested on:...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2023/03/29 12:00 a.m.•135 views

Book Store Management System 1.0.0 - Stored Cross-Site Scripting (XSS)

Exploit Title: Book Store Management System 1.0.0 - Stored Cross-Site Scripting XSS Date: 2022-11-08 Exploit Author: Rajeshwar Singh Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsmsci.zip Tested on:...

5.3AI score
SaveExploits0
OSV
OSV
•added 2023/03/16 1:15 p.m.•9 views

CVE-2023-27250

Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...

9.8CVSS7.4AI score0.00762EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/16 1:15 p.m.•21 views

CVE-2023-27250

Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...

9.8CVSS9.9AI score0.00762EPSS
SaveExploits1References1
Prion
Prion
•added 2023/03/16 1:15 p.m.•22 views

Sql injection

Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...

7.5CVSS9.8AI score0.00762EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/03/16 12:00 a.m.•60 views

CVE-2023-27250

The CVE describes a SQL Injection vulnerability in the Online Book Store Project v1.0, exploitable via the endpoint /bookstore/bookPerPub.php . The CVSS v3.1 base score is 9.8 (CRITICAL) with an attack vector of Network , no privileges required, no user interaction, and impacts on Confidentiality...

9.8CVSS9.8AI score0.00762EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/16 12:00 a.m.•10 views

PT-2023-21031 · Unknown · Online Book Store Project

Name of the Vulnerable Software and Affected Versions: Online Book Store Project version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/bookstore/bookPerPub.php" API endpoint. There is no information provided about the estimated number of potentially...

9.8CVSS7.2AI score0.00762EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2023/03/16 12:00 a.m.•9 views

CVE-2023-27250

Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...

9.9AI score0.00762EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/03/16 12:00 a.m.•8 views

Online Book Store SQL注入漏洞

Online Book Store is an online bookstore by the individual developer Arvin Arandilla. A security vulnerability exists in Online Book Store Project v1.0, which originates from a SQL injection vulnerability in /bookstore/bookPerPub.php...

9.8CVSS8.7AI score0.00762EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/03/16 12:00 a.m.•31 views

CVE-2023-27250

Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...

10AI score0.00762EPSS
SaveExploits1References1
OSV
OSV
•added 2023/02/24 9:15 p.m.•10 views

CVE-2021-34249

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive information via the id paremeter in application URL...

7.5CVSS5.9AI score0.01229EPSS
SaveExploits1References2
NVD
NVD
•added 2023/02/24 9:15 p.m.•18 views

CVE-2021-34249

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive information via the id paremeter in application URL...

7.5CVSS7.6AI score0.01229EPSS
SaveExploits1References2
Prion
Prion
•added 2023/02/24 9:15 p.m.•17 views

Sql injection

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive information via the id paremeter in application URL...

5CVSS7.6AI score0.01229EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/02/24 12:00 a.m.•25 views

CVE-2021-34249

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive information via the id paremeter in application URL...

7.8AI score0.01229EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/02/24 12:00 a.m.•14 views

Online Book Store SQL注入漏洞

Online Book Store is an online bookstore by the individual developer Arvin Arandilla. A security vulnerability exists in Online Book Store version 1.0 that could allow a remote attacker to view sensitive information via the id parameter in the application URL...

7.5CVSS7.4AI score0.01229EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/02/24 12:00 a.m.•10 views

CVE-2021-34249

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive information via the id paremeter in application URL...

7.6AI score0.01229EPSS
SaveExploits1References2
CVE
CVE
•added 2023/02/24 12:00 a.m.•63 views

CVE-2021-34249

CVE-2021-34249 affects sourcecodester Online Book Store 1.0. The vulnerability is an SQL injection in the application URL’s id parameter that could allow remote attackers to view sensitive information. The CVSS 3.1 base score is 7.5 (HIGH) with NETWORK attack vector and LOW complexity, requiring ...

7.5CVSS7.6AI score0.01229EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2023/01/30 12:00 a.m.•89 views

Book Store Management System Cross-Site Scripting Vulnerability (CNVD-2023-05395)

Book Store Management System is an online bookstore system. A security vulnerability exists in Book Store Management System v1.0, which stems from a cross-site scripting vulnerability in the /bsmsci/index.php/book page. No detailed vulnerability details are available at this time...

5.4CVSS1.5AI score0.00459EPSS
SaveExploits1References1
Rows per page
Query Builder