Online Book Store Project Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Online Book Store Project Project records in CISA KEV

No Online Book Store Project Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-23441 CVE-2023-43739 · GHSA-44fv-mcq3-v66f

HIGH 82

The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00976 Published 2023-09-28 No fix listed CWE-89

TI-2023-12002 CVE-2023-27250 · GHSA-m7fx-pjvc-f2ch

HIGH 76

Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00762 Published 2023-03-16 No fix listed CWE-89