CVE-2020-36112

CRITICO 9.8CVE-2020-36112 · Published 04/01/2021 · updated 17/06/2026

In breve

CVE-2020-36112 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda cse bookstore (cse bookstore project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 17.6%, superiore al 97.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
cse bookstore cse_bookstore_project	`= 1.0`	No fix yet

Description

CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application is running.

References

exploit-db.com/exploits/49314 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free