Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-43739 EUVD-2023-48119GHSA-44fv-mcq3-v66f

Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi)

Published Sep 28, 2023 · Updated Sep 23, 2024 · Assigned by Fluid Attacks

Description

The 'bookisbn' parameter of the cart.php resource

does not validate the characters received and they

are sent unfiltered to the database.

Affected products

VendorProductAffectedFixed
Online Book Store Project Online Book Store Project 1.0 —

References