528 matches found
CVE-2020-19112
CVE-2020-19112 affects Online Book Store v1.0. A SQL injection via the bookisbn parameter to admin_delete.php could allow a remote attacker to execute arbitrary code. Sources (NVD, RH, PRION, CNNVD, CVE lists) confirm the same description; exploitation status and remediation details are not provi...
CVE-2020-19111
CVE-2020-19111 concerns an Incorrect Access Control vulnerability in Online Book Store v1.0, exploitable via admin_verify.php. The root cause is bypassing authentication, allowing a remote attacker to obtain sensitive information. Affected software is the Online Book Store (version 1.0); the issu...
CVE-2020-19111
Incorrect Access Control vulnerability in Online Book Store v1.0 via adminverify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information...
CVE-2020-19110
The CVE-2020-19110 entry describes an SQL Injection vulnerability in Online Book Store v1.0, exploitable via the bookisbn parameter of book.php. This could allow a remote attacker to execute arbitrary code. The connected documents reiterate the same description but do not provide additional techn...
CVE-2020-19110
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code...
CVE-2020-19109
CVE-2020-19109 describes an SQL injection vulnerability in Online Book Store v1.0, exploitable via the bookisbn parameter to admin_edit.php. The vulnerability could allow a remote attacker to execute arbitrary code, as indicated by the description and impact notes. Affected component/file: admin_...
CVE-2020-19109
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...
CVE-2020-19108
The CVE-2020-19108 entry describes a SQL injection in Online Book Store v1.0 exploitable via the pubid parameter to bookPerPub.php, enabling remote code execution as per the documented description. Affected software: Online Book Store v1.0; vulnerability: improper handling of pubid leading to arb...
CVE-2020-19108
SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code...
CVE-2020-19107
SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to editbook.php, which could let a remote malicious user execute arbitrary code...
CVE-2020-19107
CVE-2020-19107 describes an SQL injection in Online Book Store v1.0, exploitable via the isbn parameter to edit_book.php, which could allow a remote attacker to execute arbitrary code. The initial documents consistently identify the vulnerable component as the Online Book Store (v1.0) and the att...
CVE-2020-23763
SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication...
CVE-2020-23763
SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication...
Sql injection
SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication...
CVE-2020-23763
The CVE-2020-23763 entry corresponds to a SQL injection vulnerability in Online Book Store 1.0, specifically in admin.php, that allows remote attackers to execute arbitrary SQL commands and bypass authentication. This is corroborated by multiple connected sources (e.g., Red Hat advisory, CNVD, CV...
CVE-2020-23763
SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication...
CVE-2020-36003
The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases...
CVE-2020-36003
The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases...
