CVE-2024-6951

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...

CVE-2024-6951

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...

CVE-2024-6951 SourceCodester Simple Online Book Store System admin_delete.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...

CVE-2024-6951 SourceCodester Simple Online Book Store System admin_delete.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The explo...

CVE-2024-6951

The CVE-2024-6951 entry corresponds to a SQL injection in SourceCodester Simple Online Book Store System 1.0,具体 affecting the admin_delete.php logic where the bookisbn parameter is manipulated. Exploitation can be performed remotely and has been disclosed publicly, with multiple sources assigning...

PT-2024-37990 · Sourcecodester · Sourcecodester Simple Online Book Store System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Book Store System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file admin delete.php. The manipulation of the bookisbn argument leads to SQL injection. It is...

Malicious code in sap-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c68c893f3475a740e060ed6a501dbabd12fc820a89a93ed0cf7931908d737ade The OpenSSF Package Analysis project identified 'sap-book' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7630 Malicious code in sap-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c68c893f3475a740e060ed6a501dbabd12fc820a89a93ed0cf7931908d737ade The OpenSSF Package Analysis project identified 'sap-book' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-37952

Improper Privilege Management vulnerability in themeenergy BookYourTravel allows Privilege Escalation.This issue affects BookYourTravel: from n/a through 8.18.17...

PT-2024-28943

Name of the Vulnerable Software and Affected Versions EGroupware versions prior to 23.1.20240624 Description The issue arises from the mishandling of an ORDER BY clause, leading to SQL injection by authenticated users when sorting Address Book or InfoLog. This specifically affects the...

Upcoming Book on AI and Democracy

If youve been reading my blog, youve noticed that I have written a lot about AI and democracy, mostly with my co-author Nathan Sanders. I am pleased to announce that were writing a book on the topic. This isnt a book about deep fakes, or misinformation. This is a book about what happens when AI...

MAL-2024-2214 Malicious code in down_load_ebook_the_comfort_book_by_matt_haig_nlaxy (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-37230

Cross-Site Request Forgery CSRF vulnerability in Rara Theme Book Landing Page.This issue affects Book Landing Page: from n/a through 1.2.3...

CVE-2024-37230

Cross-Site Request Forgery CSRF vulnerability in Rara Theme Book Landing Page.This issue affects Book Landing Page: from n/a through 1.2.3...

CVE-2024-37230

CVE-2024-37230 is a CSRF issue in the WordPress theme/book landing page (Book Landing Page). The vulnerability affects the Book Landing Page theme up to version 1.2.3 and is described as a Cross-Site Request Forgery to Notice Dismissal, implying an attacker could trigger dismissal actions via for...

WordPress Book Landing Page theme <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Book Landing Page versions = 1.2.3...

WordPress WP Logs Book plugin <= 1.0.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin WP Logs Book versions = 1.0.1...

WordPress WP Logs Book plugin <= 1.0.1 - Multiple CSRF vulnerability

Multiple CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Logs Book versions = 1.0.1...

CVE-2024-4474

The WP Logs Book WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-4477

The WP Logs Book WordPress plugin through 1.0.1 does not sanitise and escape some of its log data before outputting them back in an admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting...