Projectworlds Online Book Store SQL Injection (CVE-2020-19114)

An SQL injection vulnerability exists in Projectworlds Online Book Store . Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-19114

The CVE-2020-19114 entry describes an SQL injection in Online Book Store v1.0 that is exploitable via the publisher parameter to edit_book.php, enabling a remote attacker to execute arbitrary code. The vulnerability arises from improper input handling allowing crafted SQL commands to be injected ...