16 matches found
CVE-2025-69559: Unrestricted Upload of File with Dangerous Type
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
CVE-2025-14647: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admindelete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public...
CVE-2024-24100
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...
CVE-2024-28279
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
CVE-2024-28279
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
CVE-2024-28279: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
CVE-2024-28279
The Code-projects Computer Book Store version 1.0 is vulnerable to SQL Injection via the book.php?bookisbn= endpoint. This flaw allows an attacker to remotely manipulate the endpoint due to improper neutralization of special elements used in an SQL command. A published proof-of-concept was identi...
CVE-2024-28279
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...
CVE-2024-24096
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...
CVE-2024-24100
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...
Sql injection
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...
CVE-2024-24096
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...
CVE-2024-24096: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...
CVE-2024-24100: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...