CVE-2024-55496

The CVE-2024-55496 vulnerability affects the 1000projects Bookstore Management System PHP MySQL Project v1.0, specifically an SQL injection in the add_company.php file triggered by the delete parameter. Root cause: unsafely handling the delete parameter allows injection attempts that could compro...

CVE-2025-1173

CVE-2025-1173 affects 1000 Projects Bookstore Management System 1.0. The vulnerability exists in the process_users_del.php file, where manipulating the id argument enables SQL injection. This can be exploited remotely (network access) and is described as critical. Multiple connected sources corro...

CVE-2024-13002

CVE-2024-13002 affects 1000 Projects Bookstore Management System v1.0. The vulnerability is an SQL injection in the /order_process.php endpoint, triggered by manipulating the fnm parameter. It is exploitable remotely, with exploitation information disclosed publicly. Several connected sources cor...

CVE-2025-1172

CVE-2025-1172 affects 1000 Projects Bookstore Management System v1.0. The vulnerability is in addtocart.php where manipulation of the bc id parameter leads to SQL injection. Public exploit details exist; remote attacker could exploit with low privileges and no user interaction. Various sources re...

CVE-2024-11673

CVE-2024-11673 affects 1000 Projects Bookstore Management System 1.0. A cross-site request forgery vulnerability is present in unknown processing, allowing remote exploitation; exploitation is publicly disclosed. Connected sources provide no patch/version remediation details; only general mitigat...

CVE-2025-1174

The CVE-2025-1174 entry concerns 1000 Projects Bookstore Management System 1.0, affecting the Add Book Page’s process_book_add.php. The vulnerability is a cross-site scripting flaw caused by unsafely handling the Book Name parameter, allowing remote exploitation and exposure of user-controllable ...

CVE-2024-10968

CVE-2024-10968 affects 1000 Projects Bookstore Management System v1.0, specifically the /contact_process.php file. The vulnerability is triggered by manipulating the fnm parameter, leading to SQL injection. Exploitation is remote and has been disclosed publicly. Several connected sources corrobor...

CVE-2024-10998

CVE-2024-10998 affects 1000 Projects Bookstore Management System 1.0. A vulnerability in the admin file /admin/process_category_add.php allows manipulation of the cat parameter, causing SQL injection. The issue can be triggered remotely and has been disclosed publicly. Mitigation options document...

CVE-2024-11590

CVE-2024-11590 affects the 1000 Projects Bookstore Management System 1.0. A vulnerability exists in the forget_password_process.php functionality where manipulating the unm parameter leads to SQL injection. The issue can be exploited remotely, and exploits have been publicly disclosed. Connected ...

CVE-2024-10996

CVE-2024-10996 affects 1000 Projects Bookstore Management System v1.0. The vulnerability is an SQL injection in /admin/process_category_edit.php, triggered by manipulating the cat parameter. The issue is exploitable remotely and reportedly has had a public exploit disclosure. Multiple connected s...

CVE-2024-10969

CVE-2024-10969 is a SQL injection vulnerability affecting the 1000 Projects Bookstore Management System 1.0, located in the Login component at /admin/login_process.php. The issue arises from manipulation of the unm parameter (and related unm/pwd variants) and is exploitable remotely, with the exp...

CVE-2024-10844

The CVE-2024-10844 entry describes a SQL injection in 1000 Projects Bookstore Management System v1.0, specifically via manipulation of the parameter s in the file search.php. This can be triggered remotely, with exploitation information publicly disclosed. Connected sources consistently identify ...

CVE-2024-10997

CVE-2024-10997 affects 1000 Projects Bookstore Management System 1.0. The issue is an SQL injection in the file /book_list.php via manipulation of the id parameter. A remote attacker can exploit this, and public disclosure of the exploit is noted. Documented impact is high for confidentiality, in...

CVE-2024-10845

An SQL injection in 1000 Projects Bookstore Management System 1.0 is triggered by manipulating the id parameter in book_detail.php. The vulnerability is remote and has been publicly disclosed, with multiple sources (NVD, CVE records, and related advisories) confirming the issue. Concrete technica...

CVE-2025-10833

The CVE-2025-10833 affects 1000projects Bookstore Management System 1.0, with a vulnerability in login.php where the unm parameter is improperly handled, enabling SQL injection. Exploitation is possible remotely and the exploit has been publicly disclosed. Connected documents note exposure and pu...