Online Book System SQL Injection Vulnerability

Online Book System is an online booking system. A SQL injection vulnerability exists in version 1.0 of the Online Book System due to a lack of validation of externally entered SQL statements in the quantity/remove parameter of the /cart.php file. An attacker can exploit this vulnerability to...

CVE-2024-3003: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Online Book System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cart.php. The manipulation of the argument quantity/remove leads to sql injection. The attack can be launched remotely. The...

PT-2024-23181

Name of the Vulnerable Software and Affected Versions code-projects Online Book System version 1.0 Description A critical issue has been found in the code-projects Online Book System, affecting an unknown functionality of the file /cart.php. The manipulation of the quantity/remove argument leads ...