CVE-2020-19109

CVE-2020-19109 describes an SQL injection vulnerability in Online Book Store v1.0, exploitable via the bookisbn parameter to admin_edit.php. The vulnerability could allow a remote attacker to execute arbitrary code, as indicated by the description and impact notes. Affected component/file: admin_...

CVE-2020-19109

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...

CVE-2020-19108

The CVE-2020-19108 entry describes a SQL injection in Online Book Store v1.0 exploitable via the pubid parameter to bookPerPub.php, enabling remote code execution as per the documented description. Affected software: Online Book Store v1.0; vulnerability: improper handling of pubid leading to arb...

CVE-2020-19108

SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code...

CVE-2020-19107

SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to editbook.php, which could let a remote malicious user execute arbitrary code...

CVE-2020-19107

CVE-2020-19107 describes an SQL injection in Online Book Store v1.0, exploitable via the isbn parameter to edit_book.php, which could allow a remote attacker to execute arbitrary code. The initial documents consistently identify the vulnerable component as the Online Book Store (v1.0) and the att...

CVE-2020-23763

SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

CVE-2020-23763

SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

Sql injection

SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

CVE-2020-23763

The CVE-2020-23763 entry corresponds to a SQL injection vulnerability in Online Book Store 1.0, specifically in admin.php, that allows remote attackers to execute arbitrary SQL commands and bypass authentication. This is corroborated by multiple connected sources (e.g., Red Hat advisory, CNVD, CV...

CVE-2020-23763

SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

CVE-2020-36003

The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases...

CVE-2020-36003

The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases...

Sql injection

The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases...

CVE-2020-36003

The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases...

CVE-2020-36003

The CVE-2020-36003 entry concerns Online Book Store v1.0 where the id parameter in detail.php is vulnerable to union-based blind SQL injection, allowing an attacker to retrieve databases. Root cause is lack of input validation/sanitization on the id parameter, leading to database information disc...

CVE-2020-36003

The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases...

PHPGurukul Online Book Store SQL注入漏洞

Online BookStore is an online bookstore program. There is a sql injection vulnerability in Online Book Store v1.0. The vulnerability is caused by the id parameter in detail.php not filtering special characters, and an attacker can execute arbitrary SQL statements through this vulnerability...

Projectworlds Online Book Store Project In Php SQL Injection Vulnerability

Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. Projectworlds Online Book Store Project In Php 1.0 is vulnerable to SQL injection. An attacker could exploit this vulnerability to dump the entire database on which the w...

Online Book Store 1.0 SQL Injection

Exploit Title: Online Book Store Union Based Sql Injection Date: 2020-10-25 Exploit Author: ferhatcil Vendor Homepage: https://projectworlds.in/ Software Link: https://www.sourcecodester.com/php/14550/online-book-store-php-full-source-code.html Version: 1.0 Tested on: Ubuntu 18.04 CVE : N/A Explo...