503 matches found
CVE-2022-2771 SourceCodester Simple Online Book Store System bookPerPub.php sql injection
A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. Affected by this vulnerability is an unknown functionality of the file /obs/bookPerPub.php. The manipulation of the argument bookisbn leads to sql injection. The attack can be launched...
CVE-2022-2771
SourceCodester Simple Online Book Store System is affected by CVE-2022-2771. The vulnerability lies in the /obs/bookPerPub.php endpoint, where manipulation of the bookisbn parameter enables SQL injection. The issue is exploitable remotely and impacts confidentiality, integrity, and availability a...
CVE-2022-2770 SourceCodester Simple Online Book Store System book.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to launch the attack remotely. VDB-206166 is...
CVE-2022-2770
CVE-2022-2770 affects SourceCodester Simple Online Book Store System. Affected component: the file /obs/book.php. The vulnerability stems from manipulation of the bookisbn parameter, enabling SQL injection and allowing remote attack access. The CVE is labeled CRITICAL in some sources, with an att...
CVE-2022-2748
A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2022-2747
A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...
CVE-2022-2746
A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigne...
Sql injection
A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...
Cross site scripting
A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The...
Out-of-bounds
A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigne...
CVE-2022-2748 SourceCodester Simple Online Book Store System edit.php cross site scripting
A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2022-2748
The CVE-2022-2748 entry concerns SourceCodester Simple Online Book Store System. Affected is an unknown function in /admin/edit.php where manipulation of the eid parameter leads to cross-site scripting. The vulnerability can be triggered remotely. The available records describe the issue and its ...
CVE-2022-2747
CVE-2022-2747 affects SourceCodester Simple Online Book Store. The vulnerability resides in book.php where the book_isbn parameter is manipulated, enabling SQL injection. Attacks can be carried out remotely without authentication, with potential high impact on confidentiality, integrity, and avai...
CVE-2022-2747 SourceCodester Simple Online Book Store book.php sql injection
A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...
CVE-2022-2746
CVE-2025-66802 affects Sourcecodester Covid-19 Contact Tracing System 1.0. The connected documents describe an RCE (Remote Code Execution) vulnerability that allows a reverse shell (PHP) into the user’s image, enabling RCE. There is no publicly documented fix/version in these sources; PT-2026-229...
CVE-2022-2746 SourceCodester Simple Online Book Store System Admin_ add.php unrestricted upload
A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigne...
PT-2022-18568 · Sourcecodester · Sourcecodester Simple Online Book Store System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Book Store System affected versions not specified Description: A critical issue was found in the system, affecting an unknown function of the file /obs/book.php. The manipulation of the bookisbn argument leads to...
PT-2022-18432 · Unknown · Sourcecodester Simple Online Book Store System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Book Store System affected versions not specified Description: A critical issue has been discovered, affecting the file Admin add.php, which allows for unrestricted upload. This can be initiated remotely...
PT-2022-18439 · Sourcecodester · Sourcecodester Simple Online Book Store System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Book Store affected versions not specified Description: A critical issue was found in the processing of the file book.php, where the manipulation of the book isbn argument leads to SQL injection. The attack can be...
Simple Online Book Store System 跨站脚本漏洞
Simple Online Book Store System is a simple online bookstore system by Carlo Montero, an individual developer. Simple Online Book Store System suffers from a cross-site scripting vulnerability, which stems from an unknown function in its /admin/edit.php component that operates on the parameter ei...