503 matches found
Sql injection
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admindelete.php, which could let a remote malicious user execute arbitrary code...
Design/Logic Flaw
Arbitrary File Upload vulnerability in Online Book Store v1.0 in adminadd.php, which may lead to remote code execution...
Sql injection
SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code...
Sql injection
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code...
Authentication flaw
Incorrect Access Control vulnerability in Online Book Store v1.0 via adminverify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information...
PHPGurukul Online Book Store 代码问题漏洞
PHPGurukul Online Book Store is a PHP-based online bookstore website system. An arbitrary file upload vulnerability exists in adminadd.php in PHPGurukul Online Book Store v1.0. An attacker can exploit this vulnerability to achieve remote code execution...
PHPGurukul Online Book Store SQL注入漏洞
PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0. The vulnerability can be exploited to execute arbitrary code via the bookisbn parameter of adminedit.php...
PHPGurukul Online Book Store SQL注入漏洞
PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0, which allows remote malicious users to execute arbitrary code...
PHPGurukul Online Book Store SQL注入漏洞
PHPGurukul Online Book Store is a simple online web store made with php, mysql and bootstrap. Online Book Store version 1.0 suffers from a SQL injection vulnerability. The vulnerability can be exploited to execute arbitrary code via the pubid parameter of bookPerPub.php...
PHPGurukul Online Book Store SQL注入漏洞
PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0, which arises from the lack of validation of externally entered SQL statements in database-based applications, and can be exploited by remote attackers to...
CVE-2020-19114
SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to editbook.php, which could let a remote malicious user execute arbitrary code...
CVE-2020-19114
The CVE-2020-19114 entry describes an SQL injection in Online Book Store v1.0 that is exploitable via the publisher parameter to edit_book.php, enabling a remote attacker to execute arbitrary code. The vulnerability arises from improper input handling allowing crafted SQL commands to be injected ...
CVE-2020-19113
CVE-2020-19113 affects the PHP-based Online Book Store v1.0, specifically the file admin_add.php. The vulnerability is an arbitrary file upload that can lead to remote code execution . The issue is documented across multiple sources (e.g., NVD, CNVD, Red Hat, CVE.org) with the same description, i...
CVE-2020-19113
Arbitrary File Upload vulnerability in Online Book Store v1.0 in adminadd.php, which may lead to remote code execution...
CVE-2020-19112
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admindelete.php, which could let a remote malicious user execute arbitrary code...
CVE-2020-19112
CVE-2020-19112 affects Online Book Store v1.0. A SQL injection via the bookisbn parameter to admin_delete.php could allow a remote attacker to execute arbitrary code. Sources (NVD, RH, PRION, CNNVD, CVE lists) confirm the same description; exploitation status and remediation details are not provi...
CVE-2020-19111
Incorrect Access Control vulnerability in Online Book Store v1.0 via adminverify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information...
CVE-2020-19111
CVE-2020-19111 concerns an Incorrect Access Control vulnerability in Online Book Store v1.0, exploitable via admin_verify.php. The root cause is bypassing authentication, allowing a remote attacker to obtain sensitive information. Affected software is the Online Book Store (version 1.0); the issu...
CVE-2020-19110
The CVE-2020-19110 entry describes an SQL Injection vulnerability in Online Book Store v1.0, exploitable via the bookisbn parameter of book.php. This could allow a remote attacker to execute arbitrary code. The connected documents reiterate the same description but do not provide additional techn...