13 matches found
CVE-2024-5983 itsourcecode Online Bookstore bookPerPub.php sql injection
A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file bookPerPub.php. The manipulation of the argument pubid leads to sql injection. The attack can be launched remotely. The exploit...
CVE-2024-5983: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file bookPerPub.php. The manipulation of the argument pubid leads to sql injection. The attack can be launched remotely. The exploit...
Online Book Store SQL Injection Vulnerability
Online Book Store is an online bookstore by Arvin Arandilla, an individual developer. A SQL injection vulnerability exists in Online Book Store version 1.0, which originates from bookPerPub.php containing an unknown function that causes SQL injection via the parameter pubid...
PT-2024-37292 · Unknown · Itsourcecode Online Bookstore
Name of the Vulnerable Software and Affected Versions: itsourcecode Online Bookstore version 1.0 Description: A critical issue has been found in the itsourcecode Online Bookstore, affecting an unknown functionality of the file bookPerPub.php. The manipulation of the pubid argument leads to SQL...
CVE-2023-27250
Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...
CVE-2023-27250: Improper Neutralization of Special Elements used in an SQL Command
Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...
Online Book Store SQL注入漏洞
Online Book Store is an online bookstore by the individual developer Arvin Arandilla. A security vulnerability exists in Online Book Store Project v1.0, which originates from a SQL injection vulnerability in /bookstore/bookPerPub.php...
Simple Online Book Store System SQL注入漏洞
Simple Online Book Store System is a simple online bookstore system by Carlo Montero Personal Developer. Simple Online Book Store System suffers from a SQL injection vulnerability that originates from an unknown function in the file /obs/bookPerPub.php, where manipulation of the parameter bookisb...
CVE-2022-2771: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. Affected by this vulnerability is an unknown functionality of the file /obs/bookPerPub.php. The manipulation of the argument bookisbn leads to sql injection. The attack can be launched...
CVE-2020-19108: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code...
Sql injection
CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application...
CVE-2020-36112
CVE-2020-36112 affects CSE Bookstore 1.0. The vulnerability is an SQL injection (time-based blind, boolean-based blind, and OR-based) in the pubid parameter of bookPerPub.php and cart.php, allowing an attacker to dump the entire database. Affected software: CSE Bookstore 1.0. Root cause: improper...
CVE-2020-36112: Improper Neutralization of Special Elements used in an SQL Command
CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application...