Show filters
24 Total Results
Displaying 11-20 of 24
Sort by:
Attacker Value
Unknown
CVE-2022-37796
Disclosure Date: September 12, 2022 (last updated February 24, 2025)
In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS).
0
Attacker Value
Unknown
CVE-2021-43156
Disclosure Date: December 22, 2021 (last updated February 23, 2025)
In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book.
0
Attacker Value
Unknown
CVE-2021-43155
Disclosure Date: December 22, 2021 (last updated February 23, 2025)
Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.
0
Attacker Value
Unknown
CVE-2020-19109
Disclosure Date: May 06, 2021 (last updated February 22, 2025)
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary code.
0
Attacker Value
Unknown
CVE-2020-19107
Disclosure Date: May 06, 2021 (last updated February 22, 2025)
SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code.
0
Attacker Value
Unknown
CVE-2020-19114
Disclosure Date: May 06, 2021 (last updated February 22, 2025)
SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary code.
0
Attacker Value
Unknown
CVE-2020-19108
Disclosure Date: May 06, 2021 (last updated February 22, 2025)
SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code.
0
Attacker Value
Unknown
CVE-2020-19111
Disclosure Date: May 06, 2021 (last updated February 22, 2025)
Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information.
0
Attacker Value
Unknown
CVE-2020-19112
Disclosure Date: May 06, 2021 (last updated February 22, 2025)
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary code.
0
Attacker Value
Unknown
CVE-2020-19110
Disclosure Date: May 06, 2021 (last updated February 22, 2025)
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code.
0
