← CVE Intelligence

CVE-2023-43739

Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi) PUBLISHED

Description (CNA)

The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected (CNA)

Vendor / productVersions
Online Book Store Project / Online Book Store Projectaffected 1.0

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.