Lucene search
+L

335 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:33 p.m.7 views

CVE-2020-36112

CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application...

9.8CVSS7.7AI score0.17383EPSS
SaveExploits1
OSV
OSV
added 2025/02/11 5:15 a.m.12 views

CVE-2025-1173

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

7.2CVSS5.8AI score0.00649EPSS
SaveExploits1References5
NVD
NVD
added 2025/02/11 5:15 a.m.14 views

CVE-2025-1173

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

7.2CVSS0.00649EPSS
SaveExploits1References5
NVD
NVD
added 2025/02/11 5:15 a.m.23 views

CVE-2025-1174

A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file processbookadd.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attac...

4.8CVSS0.00494EPSS
SaveExploits1References5
OSV
OSV
added 2025/02/11 5:15 a.m.6 views

CVE-2025-1174

A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file processbookadd.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attac...

4.8CVSS3.8AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/02/11 5:0 a.m.10 views

CVE-2025-1174 1000 Projects Bookstore Management System Add Book Page process_book_add.php cross site scripting

A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file processbookadd.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attac...

4.8CVSS3.9AI score0.00494EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/02/11 5:0 a.m.28 views

CVE-2025-1174 1000 Projects Bookstore Management System Add Book Page process_book_add.php cross site scripting

A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file processbookadd.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attac...

4.8CVSS0.00494EPSS
SaveExploits1References5
CVE
CVE
added 2025/02/11 5:0 a.m.65 views

CVE-2025-1174

The CVE-2025-1174 entry concerns 1000 Projects Bookstore Management System 1.0, affecting the Add Book Page’s process_book_add.php. The vulnerability is a cross-site scripting flaw caused by unsafely handling the Book Name parameter, allowing remote exploitation and exposure of user-controllable ...

4.8CVSS3.5AI score0.00494EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/11 4:31 a.m.16 views

CVE-2025-1173 1000 Projects Bookstore Management System process_users_del.php sql injection

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

5.8CVSS5.2AI score0.00649EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/02/11 4:31 a.m.21 views

CVE-2025-1173 1000 Projects Bookstore Management System process_users_del.php sql injection

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file processusersdel.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

5.8CVSS0.00649EPSS
SaveExploits1References5
CVE
CVE
added 2025/02/11 4:31 a.m.84 views

CVE-2025-1173

CVE-2025-1173 affects 1000 Projects Bookstore Management System 1.0. The vulnerability exists in the process_users_del.php file, where manipulating the id argument enables SQL injection. This can be exploited remotely (network access) and is described as critical. Multiple connected sources corro...

7.2CVSS5.2AI score0.00649EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/02/11 4:15 a.m.13 views

CVE-2025-1172

A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be launched remotely. Th...

8.8CVSS6.5AI score0.00525EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/02/11 4:0 a.m.11 views

CVE-2025-1172 1000 Projects Bookstore Management System addtocart.php sql injection

A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be launched remotely. Th...

6.5CVSS6.8AI score0.00525EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/02/11 4:0 a.m.24 views

CVE-2025-1172 1000 Projects Bookstore Management System addtocart.php sql injection

A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be launched remotely. Th...

6.5CVSS0.00525EPSS
SaveExploits1References5
CVE
CVE
added 2025/02/11 4:0 a.m.71 views

CVE-2025-1172

CVE-2025-1172 affects 1000 Projects Bookstore Management System v1.0. The vulnerability is in addtocart.php where manipulation of the bc id parameter leads to SQL injection. Public exploit details exist; remote attacker could exploit with low privileges and no user interaction. Various sources re...

8.8CVSS6.7AI score0.00525EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.4 views

1000 Projects Bookstore Management System SQL注入漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from the parameter bcid in the file addtocart.php, which can lead to SQL injection...

8.8CVSS7AI score0.00525EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.10 views

1000 Projects Bookstore Management System 代码注入漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A code injection vulnerability exists in version 1.0 of 1000 Projects Bookstore Management System, which stems from the parameter Book Name in the file processbookadd.php and can lead to...

4.8CVSS4.2AI score0.00494EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/02/11 12:0 a.m.6 views

PT-2025-6153 · Unknown · 1000 Projects Bookstore Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Bookstore Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Bookstore Management System. This issue affects an unknown part of the file process users del.php. The manipulation of the...

7.2CVSS8.5AI score0.00649EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/02/11 12:0 a.m.6 views

PT-2025-6150 · Unknown · 1000 Projects Bookstore Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Bookstore Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Bookstore Management System, affecting some unknown functionality of the file addtocart.php. The manipulation of the...

8.8CVSS8.5AI score0.00525EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.8 views

1000 Projects Bookstore Management System SQL注入漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from a parameter id in the file processusersdel.php that can lead to SQL injection...

7.2CVSS5.8AI score0.00649EPSS
SaveExploits1References5
Rows per page
Query Builder