Projectworlds
Projectworlds Online Book Store Project IN PHP: vulnerabilidades y CVE
Projectworlds Online Book Store Project IN PHP tiene 10 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 9 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses0
Críticas9
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-43156 | Media (6.5) | 0.53% | — | 22 dic 2021 | In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book. |
| CVE-2021-43155 | Crítica (9.8) | 1.1% | — | 22 dic 2021 | Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php. |
| CVE-2020-19114 | Crítica (9.8) | 1.9% | — | 6 may 2021 | SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary code. |
| CVE-2020-19113 | Crítica (9.8) | 3.0% | — | 6 may 2021 | Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution. |
| CVE-2020-19112 | Crítica (9.8) | 1.9% | — | 6 may 2021 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary code. |
| CVE-2020-19111 | Crítica (9.8) | 1.9% | — | 6 may 2021 | Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information. |
| CVE-2020-19110 | Crítica (9.8) | 1.6% | — | 6 may 2021 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code. |
| CVE-2020-19109 | Crítica (9.8) | 1.9% | — | 6 may 2021 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary code. |
| CVE-2020-19108 | Crítica (9.8) | 1.9% | — | 6 may 2021 | SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code. |
| CVE-2020-19107 | Crítica (9.8) | 1.9% | — | 6 may 2021 | SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code. |
Otros productos de Projectworlds
Online Examination System · 17Advanced Library Management System · 17Online Time Table Generator · 15Life Insurance Management System · 14Travel Management System · 14Online Food Ordering System · 13Online Lawyer Management System · 10Visitor Management System · 9Online Matrimonial Project · 7Online Admission System · 7Hospital Management System IN PHP · 7Online ART Gallery Shop · 6