CVE-2024-37848

https://notcve.org/view.php?id=CVE-2024-37848

17 Jun 2024 — SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admin_delete.php component. Vulnerabilidad de inyección SQL en Online-Bookstore-Project-In-PHP v1.0 permite a un atacante local ejecutar código arbitrario a través del componente admin_delete.php. • https://github.com/Lanxiy7th/lx_CVE_report-/issues/13 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •