PT-2024-39380

Name of the Vulnerable Software and Affected Versions itsourcecode Online Bookstore version 1.0 Description A critical issue affects the processing of the file admin add.php, where the manipulation of the image argument leads to unrestricted upload. The attack can be initiated remotely...

PT-2022-20760

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue is related to a Cross Site scripting XSS vulnerability. It affects the interface/usergroup/usergroup admin add.php file, specifically the Username field. This vulnerability can be...

PT-2021-10284

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue is related to an Arbitrary File Upload vulnerability, which may lead to remote code execution. This vulnerability is present in the admin add.php file. Recommendations: For Online Book Stor...

PT-2020-11982 · Phpgurukul · Phpgurukul Online Book Store

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Book Store version 1.0 Description: An unauthenticated file upload issue has been identified in the admin add.php file. This could be exploited by a remote attacker to upload content, including PHP files, potentially leading...

Sql injection

Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...

CVE-2009-0332: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AV Book Library before 1.1 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/edit.php, 2 admin/add.php, 3 lib/booksearch.php, and possibly other components...

CVE-2006-6463

The CVE-2006-6463 entry concerns Midicart’s admin/add.php, where an unrestricted file upload vulnerability exists. According to PT-2006-7072, remote authenticated users can upload arbitrary files (potentially including .php) to the images/ directory under the web root via the admin/add.php endpoi...

CVE-2006-6463: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and possibly other files, to the images/ directory under the web root...