10 matches found
CVE-2025-14647 code-projects Computer Book Store admin_delete.php sql injection
A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admindelete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public...
EUVD-2020-11014
Malware in sbrugna...
PT-2022-18439 · Sourcecodester · Sourcecodester Simple Online Book Store System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Book Store affected versions not specified Description: A critical issue was found in the processing of the file book.php, where the manipulation of the book isbn argument leads to SQL injection. The attack can be...
CVE-2020-19107
SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to editbook.php, which could let a remote malicious user execute arbitrary code...
CVE-2020-19107
SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to editbook.php, which could let a remote malicious user execute arbitrary code...
Sql injection
SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to editbook.php, which could let a remote malicious user execute arbitrary code...
CVE-2020-19107
SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to editbook.php, which could let a remote malicious user execute arbitrary code...
Joomla com_carocci plugin 'isbn' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'isbn' parameter of the Joomla comcarocci plugin. An attacker can exploit the vulnerability to access or modify database data...
BookReview 1.0 add_classification.htm isbn Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13783/info BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
CVE-2005-1782
Multiple cross-site scripting XSS vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via the node parameter to 1 addreview.htm, 2 suggestreview.htm, 3 suggestcategory.htm, 4 addbooklist.htm, or 5 addurl.htm, the isbn parameter to 6 addreview.htm, ...