A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file bookPerPub.php. The manipulation of the argument pubid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268459.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.268459 | Third Party Advisory |
| https://vuldb.com/?ctiid.268459 | Permissions Required |
| https://vuldb.com/?submit.356164 | VDB Entry |
| https://github.com/LiuYongXiang-git/cve/issues/2 | Exploit Mitigation |
Configurations
History
24 Jul 2024, 02:39
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Itsourcecode
Itsourcecode online Book Store Project |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:itsourcecode:online_book_store_project:1.0:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?ctiid.268459 - Permissions Required | |
| References | () https://vuldb.com/?submit.356164 - VDB Entry | |
| References | () https://github.com/LiuYongXiang-git/cve/issues/2 - Exploit, Mitigation | |
| References | () https://vuldb.com/?id.268459 - Third Party Advisory |
14 Jun 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-14 02:15
Updated : 2024-07-24 02:39
NVD link : CVE-2024-5983
Mitre link : CVE-2024-5983
JSON object : View
Products Affected
itsourcecode
- online_book_store_project
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')