孙一航 广州大学

1 exploit Active since Nov 2024
CVE-2024-10997 WRITEUP MEDIUM WRITEUP
Bookstore Management System 1.0 - SQL Injection via /book_list.php id Parameter
A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /book_list.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS 6.3