3 matches found
PT-2024-16586
Name of the Vulnerable Software and Affected Versions 1000 Projects Bookstore Management System version 1.0 Description A critical issue has been found in the 1000 Projects Bookstore Management System, affecting unknown code in the file book detail.php. The manipulation of the id argument leads t...
CVE-2010-4923: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...
PT-2011-1858
Name of the Vulnerable Software and Affected Versions Virtue Book Store affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bid parameter in the "book/detail.php" endpoint. Recommendations At the moment, there i...