A vulnerability was identified in itsourcecode Online Book Store 1.0.
A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /admin_edit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Itsourcecode
- Product
- Online Book Store
- CVSS v3.1
- 7.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Exploitation
- public exploit code reported
- Weakness
- CWE-74, CWE-89
- NVD status
- Deferred
Why it ranks 37 (Notable)
- Public exploit code reported
- CVSS v3.1 7.3 high
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.