Filtered by vendor Itsourcecode Subscriptions
Filtered by product Online Book Store Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123028 1 Itsourcecode 1 Online Book Store 2026-11-06 7.3 High
A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /admin_edit.php. The manipulation of the argument bookisbn with the input 1%27%20AND%20GTID_SUBSET(CONCAT(0x71717a6b71,(SELECT%20(ELT(6040=6040,1))),0x716b6a7171),6040)--%20LpDt as part of String leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
CVE-2026-116515 1 Itsourcecode 1 Online Book Store 2026-10-27 6.3 Medium
A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.