16 matches found
CVE-2025-69559: Unrestricted Upload of File with Dangerous Type
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
CVE-2025-14647: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admindelete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public...
CVE-2024-24100
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...
CVE-2024-28279
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
CVE-2024-28279
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
CVE-2024-28279: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
CVE-2024-28279
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
CVE-2024-28279
Code-projects Computer Book Store version 1.0 is vulnerable to SQL Injection through the book.php?bookisbn= endpoint. An attacker can remotely manipulate this endpoint to execute unauthorized SQL commands. A published proof-of-concept is available via a public link. Remediation involves immediate...
CVE-2024-24096
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...
CVE-2024-24100
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...
Sql injection
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...
CVE-2024-24096
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...
CVE-2024-24096: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...
CVE-2024-24100: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...