The Online Book Store Project maintains a niche web application for book retail, with observed vulnerabilities centered on SQL injection and hard-coded credential exposure—weakness classes typical of inadequately parameterized database queries and insufficient secret management in application code. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Online Book Store Project over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-24115CRITICAL In projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to admin panel access. | Aug 31, 2020 | 9.8 | 32 | NO | NO |
CVE-2023-27250CRITICAL Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php. | Mar 16, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-43739CRITICAL The 'bookisbn' parameter of the cart.php resource
does not validate the characters received and they
are sent unfiltered to the database.
| Sep 28, 2023 | 9.8 | 28 | NO | NO |
CVE-2020-23763CRITICAL SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication. | Apr 9, 2021 | 9.8 | 28 | NO | NO |
CVE-2021-34249HIGH SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive information via the id paremeter in application URL. | Feb 24, 2023 | 7.5 | 24 | NO | NO |
CVE-2020-36003HIGH The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases. | Feb 17, 2021 | 7.5 | 23 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Online Book Store Project.
Media articles that mention a CVE ID that affects a product developed by Online Book Store Project — matched by CVE ID, not by vendor name.