critical9.8
CVE-2020-23763
SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication.
Impact
SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Book Store Project | Online Book Store | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://hidden-one.co.in/2021/04/09/cve-2020-23763-sql-injection-leading-to-authentication-bypass-in-online-book-store-1-0/
- https://projectworlds.in/free-projects/php-projects/online-book-store-project-in-php/
- http://hidden-one.co.in/2021/04/09/cve-2020-23763-sql-injection-leading-to-authentication-bypass-in-online-book-store-1-0/
- https://projectworlds.in/free-projects/php-projects/online-book-store-project-in-php/