Vulnerabilities

TI-2021-13321 CVE-2021-34249 · GHSA-94fx-vhqr-53xq

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote…

HIGH 72

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive information via the id paremeter in application URL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01229 Published 2023-02-24 No fix listed CWE-89

TI-2020-14666 CVE-2020-23763 · GHSA-rq83-h985-5f5r

SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute…

MEDIUM 46

SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01862 Published 2021-04-09 No fix listed CWE-89

TI-2020-18413 CVE-2020-36003 · GHSA-r4qf-77fr-vfcg

The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based…

LOW 36

The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01547 Published 2021-02-17 No fix listed CWE-89

TI-2020-14801 CVE-2020-24115 · GHSA-grm9-4m4r-6pm9

In projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to admin panel access.

MEDIUM 46

In projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to admin panel access.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01988 Published 2020-08-31 No fix listed CWE-798

Vulnerabilities

Filters

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote…

SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute…

The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based…

In projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to admin panel access.