CVE-2024-2271 - keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection

Back Back to CVE browser

CRITICAL

keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection

Published Mar 7, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.56%

Description

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument product_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256041 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Keerti1924 Product Online-Book-Store-Website Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Keerti1924

Online-Book-Store-Website

n/a

Version	Status	Constraints
1.0	affected	-

Vendor Keerti1924 Product Online Bookstore Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Keerti1924

Online Bookstore

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27226
Advisory
https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/Blind%20SQL%20Injection%20%20Shop/Blind%20SQL%20Injection%20Shop.php%20.md
exploitBroken Link
https://vuldb.com/?ctiid.256041
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.256041
vdb-entrytechnical-descriptionPermissions Required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27226		Advisory
https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/Blind%20SQL%20Injection%20%20Shop/Blind%20SQL%20Injection%20Shop.php%20.md		exploitBroken Link
https://vuldb.com/?ctiid.256041		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.256041		vdb-entrytechnical-descriptionPermissions Required