OB
Product
Online Book Store Project IN Php
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 0Medium 1Low 0
Watch
Add Online Book Store Project IN Php to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-43155 | 9.8 | Dec 22 | Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php Affected: 1.0 |
| CVE-2020-19114 | 9.8 | May 6 | SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary code Affected: 1.0 |
| CVE-2020-19113 | 9.8 | May 6 | Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution Affected: 1.0 |
| CVE-2020-19112 | 9.8 | May 6 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary code Affected: 1.0 |
| CVE-2020-19111 | 9.8 | May 6 | Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication and obtain sensitive… Affected: 1.0 |
| CVE-2020-19110 | 9.8 | May 6 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code Affected: 1.0 |
| CVE-2020-19109 | 9.8 | May 6 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary code Affected: 1.0 |
| CVE-2020-19108 | 9.8 | May 6 | SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code Affected: 1.0 |
| CVE-2020-19107 | 9.8 | May 6 | SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code Affected: 1.0 |
| CVE-2021-43156 | 6.5 | Dec 22 | In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book Affected: 1.0 |
Showing 10