CVE-2020-19111

概要

参考情報

• cwe.mitre.org/data/definitions/287.html · Third Party Advisory
• projectworldsofficial/online-book-store-project-in-php · Exploit

online book store project in php のその他の脆弱性

• CVE-2021-43156中 6.5In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book.
• CVE-2021-43155緊急 9.8Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.
• CVE-2020-19114緊急 9.8SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user …
• CVE-2020-19113緊急 9.8Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution.
• CVE-2020-19112緊急 9.8SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious use…