CVSS: 4.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-3004 – code-projects Online Book System Product.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-3004
A vulnerability was found in code-projects Online Book System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Product.php. The manipulation of the argument value leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/W01fh4cker/CVE-2024-30043-XXE https://github.com/BurakSevben/CVEs/blob/main/Online%20Book%20System/Online%20Book%20System%20-%20Cross-Site-Scripting.md https://vuldb.com/?ctiid.258206 https://vuldb.com/?id.258206 https://vuldb.com/?submit.305059 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3003 – code-projects Online Book System cart.php sql injection
https://notcve.org/view.php?id=CVE-2024-3003
A vulnerability has been found in code-projects Online Book System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cart.php. The manipulation of the argument quantity/remove leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/Online%20Book%20System/Online%20Book%20System-%20SQL%20Injection%20-%205.md https://vuldb.com/?ctiid.258205 https://vuldb.com/?id.258205 https://vuldb.com/?submit.305057 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3002 – code-projects Online Book System description.php sql injection
https://notcve.org/view.php?id=CVE-2024-3002
A vulnerability, which was classified as critical, was found in code-projects Online Book System 1.0. Affected is an unknown function of the file /description.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/Online%20Book%20System/Online%20Book%20System-%20SQL%20Injection%20-%204.md https://vuldb.com/?ctiid.258204 https://vuldb.com/?id.258204 https://vuldb.com/?submit.305056 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3001 – code-projects Online Book System Product.php sql injection
https://notcve.org/view.php?id=CVE-2024-3001
A vulnerability, which was classified as critical, has been found in code-projects Online Book System 1.0. This issue affects some unknown processing of the file /Product.php. The manipulation of the argument value leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/Online%20Book%20System/Online%20Book%20System-%20SQL%20Injection%20-%203.md https://vuldb.com/?ctiid.258203 https://vuldb.com/?id.258203 https://vuldb.com/?submit.305055 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3000 – code-projects Online Book System index.php sql injection
https://notcve.org/view.php?id=CVE-2024-3000
A vulnerability classified as critical was found in code-projects Online Book System 1.0. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument username/password/login_username/login_password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/Online%20Book%20System/Online%20Book%20System%20-%20Authentication%20Bypass.md https://vuldb.com/?ctiid.258202 https://vuldb.com/?id.258202 https://vuldb.com/?submit.305052 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •