A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://1000projects.org/ | Product |
| https://github.com/NeoVuln/CVE/issues/1 | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.295076 | Permissions Required VDB Entry |
| https://vuldb.com/?id.295076 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.495183 | Third Party Advisory VDB Entry |
Configurations
History
28 Feb 2025, 02:17
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:1000projects:bookstore_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
1000projects bookstore Management System
1000projects |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | () https://vuldb.com/?ctiid.295076 - Permissions Required, VDB Entry | |
| References | () https://github.com/NeoVuln/CVE/issues/1 - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?submit.495183 - Third Party Advisory, VDB Entry | |
| References | () https://1000projects.org/ - Product | |
| References | () https://vuldb.com/?id.295076 - Third Party Advisory, VDB Entry | |
| CWE |
11 Feb 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-11 04:15
Updated : 2025-02-28 02:17
NVD link : CVE-2025-1172
Mitre link : CVE-2025-1172
JSON object : View
Products Affected
1000projects
- bookstore_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')