Skip to content
OpenAdvisories
High · 8.8 CVE-2023-43740 EUVD-2023-48120GHSA-rvm8-gwf7-59xx

Online Book Store Project v1.0 - Insecure File Upload

Published Sep 28, 2023 · Updated Sep 23, 2024 · Assigned by Fluid Attacks

Description

Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of
admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting
the application.

Affected products

VendorProductAffectedFixed
Online Book Store Project Online Book Store Project 1.0 —

References