335 matches found
CVE-2020-36112
CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application...
CVE-2025-1173
A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-1173
A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-1174
A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file processbookadd.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attac...
CVE-2025-1174
A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file processbookadd.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attac...
CVE-2025-1174 1000 Projects Bookstore Management System Add Book Page process_book_add.php cross site scripting
A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file processbookadd.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attac...
CVE-2025-1174 1000 Projects Bookstore Management System Add Book Page process_book_add.php cross site scripting
A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file processbookadd.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attac...
CVE-2025-1174
The CVE-2025-1174 entry concerns 1000 Projects Bookstore Management System 1.0, affecting the Add Book Page’s process_book_add.php. The vulnerability is a cross-site scripting flaw caused by unsafely handling the Book Name parameter, allowing remote exploitation and exposure of user-controllable ...
CVE-2025-1173 1000 Projects Bookstore Management System process_users_del.php sql injection
A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-1173 1000 Projects Bookstore Management System process_users_del.php sql injection
A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-1173
CVE-2025-1173 affects 1000 Projects Bookstore Management System 1.0. The vulnerability exists in the process_users_del.php file, where manipulating the id argument enables SQL injection. This can be exploited remotely (network access) and is described as critical. Multiple connected sources corro...
CVE-2025-1172
A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be launched remotely. Th...
CVE-2025-1172 1000 Projects Bookstore Management System addtocart.php sql injection
A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be launched remotely. Th...
CVE-2025-1172 1000 Projects Bookstore Management System addtocart.php sql injection
A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be launched remotely. Th...
CVE-2025-1172
CVE-2025-1172 affects 1000 Projects Bookstore Management System v1.0. The vulnerability is in addtocart.php where manipulation of the bc id parameter leads to SQL injection. Public exploit details exist; remote attacker could exploit with low privileges and no user interaction. Various sources re...
1000 Projects Bookstore Management System SQL注入漏洞
1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from the parameter bcid in the file addtocart.php, which can lead to SQL injection...
1000 Projects Bookstore Management System 代码注入漏洞
1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A code injection vulnerability exists in version 1.0 of 1000 Projects Bookstore Management System, which stems from the parameter Book Name in the file processbookadd.php and can lead to...
PT-2025-6153 · Unknown · 1000 Projects Bookstore Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Bookstore Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Bookstore Management System. This issue affects an unknown part of the file process users del.php. The manipulation of the...
PT-2025-6150 · Unknown · 1000 Projects Bookstore Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Bookstore Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Bookstore Management System, affecting some unknown functionality of the file addtocart.php. The manipulation of the...
1000 Projects Bookstore Management System SQL注入漏洞
1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from a parameter id in the file processusersdel.php that can lead to SQL injection...