Filtered by vendor Online Book Store Project Project Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-27250 1 Online Book Store Project Project 1 Online Book Store Project 2025-02-26 9.8 Critical
Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php.
CVE-2023-43739 1 Online Book Store Project Project 1 Online Book Store Project 2024-11-21 9.8 Critical
The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database.