A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file delete_book.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remot...
Product
sourcecodester Simple Book Catalog App vulnerabilities
2 published CVES affecting sourcecodester Simple Book Catalog App, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 1
- High
- 0
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest sourcecodester Simple Book Catalog App CVEs
Newest publication first
-
CriticalCVSS 9.8 EPSS 0.80%
-
CVE-2023-4847 SourceCodester Simple Book Catalog App Update Book Form cross site scripting
PublishedMediumCVSS 6.1 EPSS 0.60%A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument book_title/book_author leads to cross site scripting. It is possible to laun...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.