Lucene search
+L

503 matches found

CNVD
CNVD
added 2021/12/24 12:0 a.m.20 views

Projectworlds Online Book Store Project In Php CSRF Vulnerability

Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. A security vulnerability exists in Projectworlds Online Book Store Project In Php version 1.0, which can be exploited by an attacker to delete any book from the system...

6.5CVSS6.4AI score0.00527EPSS
SaveExploits1
OSV
OSV
added 2021/12/22 6:15 p.m.2 views

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

6.5CVSS5.8AI score0.00527EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/22 6:15 p.m.3 views

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

6.5CVSS6.7AI score0.00527EPSS
SaveExploits1References2
NVD
NVD
added 2021/12/22 6:15 p.m.18 views

CVE-2021-43155

Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php...

9.8CVSS0.01094EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/22 6:15 p.m.21 views

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

6.5CVSS0.00527EPSS
SaveExploits1References1
Prion
Prion
added 2021/12/22 6:15 p.m.16 views

Sql injection

Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php...

7.5CVSS9.8AI score0.01094EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/22 6:15 p.m.17 views

Cross site request forgery (csrf)

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

4.3CVSS6.5AI score0.00527EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/22 5:24 p.m.25 views

CVE-2021-43155

Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php...

10AI score0.01094EPSS
SaveExploits1References1
CVE
CVE
added 2021/12/22 5:24 p.m.73 views

CVE-2021-43155

CVE-2021-43155 affects Projectsworlds Online Book Store PHP v1.0. A SQL injection exists in cart.php via the bookisbn parameter, allowing unauthorized access to the database and potential data exposure or manipulation as described in CNVD/CNNVD records. The vulnerability details are provided acro...

9.8CVSS9.8AI score0.01094EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/12/22 5:22 p.m.54 views

CVE-2021-43156

The CVE-2021-43156 entry affects ProjectWorlds Online Book Store PHP 1.0, where a CSRF flaw in admin_delete.php allows a remote attacker to delete any book. The connected documents consistently describe this CSRF vulnerability in the admin_delete.php endpoint as the root cause, with impact limite...

6.5CVSS6.4AI score0.00527EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/22 5:22 p.m.23 views

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

6.7AI score0.00527EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/22 12:0 a.m.6 views

Projectworlds Online Book Store Project In Php SQL注入漏洞

Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectsworlds.A SQL injection vulnerability exists in Projectsworlds Online Book Store PHP, which stems from the fact that Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the...

9.8CVSS5.9AI score0.01094EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/12/22 12:0 a.m.5 views

Projectworlds Online Book Store Project In Php 跨站请求伪造漏洞

Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. A security vulnerability exists in Projectworlds Online Book Store Project In Php version 1.0, which can be exploited by an attacker to delete any book from the system...

6.5CVSS5.6AI score0.00527EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
added 2021/05/18 12:0 a.m.18 views

Projectworlds Online Book Store SQL Injection (CVE-2020-19114)

An SQL injection vulnerability exists in Projectworlds Online Book Store . Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS4.8AI score0.01944EPSS
SaveExploits1
CNVD
CNVD
added 2021/05/11 12:0 a.m.6 views

PHPGurukul Online Book Store SQL Injection Vulnerability (CNVD-2021-34108)

PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0, which can be exploited by attackers to execute arbitrary code...

9.8CVSS8.3AI score0.01944EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/05/10 12:0 a.m.8 views

PHPGurukul Online Book Store SQL Injection Vulnerability (CNVD-2021-34502)

PHPGurukul Online Book Store is a simple online web store made with php, mysql and bootstrap. Online Book Store version 1.0 suffers from a SQL injection vulnerability. The vulnerability can be exploited to execute arbitrary code via the pubid parameter of bookPerPub.php...

9.8CVSS8.5AI score0.01944EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/05/07 12:0 a.m.10 views

PHPGurukul Online Book Store Arbitrary File Upload Vulnerability

PHPGurukul Online Book Store is a PHP-based online bookstore website system. An arbitrary file upload vulnerability exists in adminadd.php in PHPGurukul Online Book Store v1.0. An attacker can exploit this vulnerability to achieve remote code execution...

9.8CVSS7.7AI score0.03008EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/05/07 12:0 a.m.10 views

PHPGurukul Online Book Store SQL Injection Vulnerability (CNVD-2021-35002)

PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0. The vulnerability can be exploited to execute arbitrary code via the bookisbn parameter of book.php...

9.8CVSS8.4AI score0.01556EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/05/07 12:0 a.m.11 views

PHPGurukul Online Book Store Access Control Error Vulnerability

PHPGurukul Online Book Store is a PHP-based online bookstore website system. An access control error vulnerability exists in adminverify.php in Online Book Store v1.0. An attacker can exploit this vulnerability to bypass authentication and obtain sensitive information...

9.8CVSS6.9AI score0.01892EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/05/07 12:0 a.m.8 views

PHPGurukul Online Book Store SQL Injection Vulnerability (CNVD-2021-35001)

PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0, which arises from the lack of validation of externally entered SQL statements in database-based applications, and can be exploited by remote attackers to...

9.8CVSS8.6AI score0.01944EPSS
SaveExploits1References1
Rows per page
Query Builder