PT-2025-3817 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue has been found in the code-projects Online Book Shop, affecting unknown code in the /detail.php file. The manipulation of the id argument leads to SQL injection. This...

PT-2025-3818

Name of the Vulnerable Software and Affected Versions code-projects Online Book Shop version 1.0 Description A critical issue affects the processing of the file /process login.php, where the manipulation of the usernm argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-3821

Name of the Vulnerable Software and Affected Versions code-projects Online Book Shop version 1.0 Description A problematic issue has been found in the file /subcat.php, where the manipulation of the catnm argument leads to cross site scripting. This issue can be exploited remotely. The exploit ha...

CVE-2025-0300: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-0296: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Book Shop 1.0. It has been classified as critical. This affects an unknown part of the file /booklist.php. The manipulation of the argument subcatid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-0299: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2025-0297: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /detail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-0295: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Book Shop 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /booklist.php?subcatid=1. The manipulation of the argument subcatnm leads to cross site scripting. The attack may be launched remotely. T...

PT-2025-3815

Name of the Vulnerable Software and Affected Versions code-projects Online Book Shop version 1.0 Description A problem has been found in the software, affecting some unknown functionality of the file /booklist.php?subcatid=1. The issue is caused by the manipulation of the subcatnm argument, leadi...