CVE-2024-24096

Code-projects Computer Book Store version 1.0 is vulnerable to SQL Injection via the BookSBIN component. This vulnerability allows for the improper neutralization of special elements used in SQL commands, potentially leading to high impact on confidentiality, integrity, and availability. No speci...

CVE-2024-24100

The Code-projects Computer Book Store 1.0 (also referred to as Scholars Tracking System version 1.0 ) is vulnerable to SQL Injection via the PublisherID parameter. This vulnerability, identified as CWE-89 , allows for potential unauthorized access to sensitive data . While there is no information...

CVE-2024-28279

The Code-projects Computer Book Store version 1.0 is vulnerable to SQL Injection via the book.php?bookisbn= endpoint. This flaw allows an attacker to remotely manipulate the endpoint due to improper neutralization of special elements used in an SQL command. A published proof-of-concept was identi...

CVE-2025-14647

CVE-2025-14647 affects Code-Projects Computer Book Store 1.0. The vulnerability is an SQL injection in the file /admin_delete.php, caused by manipulating the bookisbn parameter in an unknown function. The issue can be exploited remotely and is documented as having public exploits. Various sources...

CVE-2025-69559

code-projects Computer Book Store 1.0 is vulnerable to an unrestricted file upload in the admin_add.php component. This vulnerability allows for the upload of files with dangerous types. While the documents confirm the existence of the vulnerability and its location, specific exploitation details...