Projectworlds Online Book Store Project In Php vulnerabilities
10 vulnerabilities
Known vulnerabilities in Projectworlds Online Book Store Project In Php, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-43156projectworldsonline_book_store_project_in_php
EPSS score0.54%
In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book.CVE-2021-43155projectworldsonline_book_store_project_in_phpEPSS score1.13%
Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.CVE-2020-19107projectworldsonline_book_store_project_in_phpEPSS score1.94%
SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code.CVE-2020-19111projectworldsonline_book_store_project_in_phpEPSS score1.89%
Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information.CVE-2020-19108projectworldsonline_book_store_project_in_phpEPSS score1.94%
SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code.CVE-2020-19109projectworldsonline_book_store_project_in_phpEPSS score1.94%
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary code.CVE-2020-19112projectworldsonline_book_store_project_in_phpEPSS score1.94%
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary code.CVE-2020-19113projectworldsonline_book_store_project_in_phpEPSS score3.01%
Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution.CVE-2020-19110projectworldsonline_book_store_project_in_phpEPSS score1.56%
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code.CVE-2020-19114projectworldsonline_book_store_project_in_phpEPSS score1.94%
SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary code.