Approved changes feed: RSS · Atom

cpe:2.3:a:online_book_store_project:online_book_store_project:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOnline Book Store Project (e760b130-79a3-58b0-9ef4-8d48de5d037b)
ProductOnline Book Store Project (8c214aa4-5801-5bf2-9878-868ae8d2cbc4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-43740 vulnerable 2026-06-08 06:12:37.740763 Online Book Store Project v1.0 - Insecure File Upload
HIGH (8.8)
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.
Published: 2023-09-28T20:48:22.121Z
Updated: 2024-09-23T18:07:33.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43739 vulnerable 2026-06-08 06:12:37.738673 Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi)
CRITICAL (9.8)
The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database.
Published: 2023-09-28T21:32:55.726Z
Updated: 2024-09-23T18:47:21.233Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.