Simple E Commerce Bookstore
Monthly
SQL injection in Simple E-Commerce Bookstore 1.0 allows remote attackers to inject SQL via the register_username parameter during user registration, potentially exposing or altering database contents. Exploit code is publicly available, but EPSS indicates a low 0.03% exploitation probability, and no active exploitation is reported.
SQL injection in Simple E-Commerce Bookstore 1.0 allows remote attackers to execute arbitrary SQL via the login_username parameter in /index.php. The vulnerability permits unauthorized access to the database, potentially leading to data exposure or authentication bypass. Public exploit code is available, but no active exploitation or vendor patch has been confirmed.
SQL injection in SourceCodester Simple E-Commerce Bookstore 1.0 allows remote attackers to manipulate the 'remove' parameter in /cart.php to execute arbitrary SQL commands. A publicly available proof-of-concept exploit exists, but the EPSS exploitation probability is very low (0.03%), indicating minimal real-world exploitation risk despite the remote attack vector. No active exploitation in the wild has been confirmed (CISA KEV not listed).
SQL injection in Simple E-Commerce Bookstore 1.0 allows remote attackers to inject SQL via the register_username parameter during user registration, potentially exposing or altering database contents. Exploit code is publicly available, but EPSS indicates a low 0.03% exploitation probability, and no active exploitation is reported.
SQL injection in Simple E-Commerce Bookstore 1.0 allows remote attackers to execute arbitrary SQL via the login_username parameter in /index.php. The vulnerability permits unauthorized access to the database, potentially leading to data exposure or authentication bypass. Public exploit code is available, but no active exploitation or vendor patch has been confirmed.
SQL injection in SourceCodester Simple E-Commerce Bookstore 1.0 allows remote attackers to manipulate the 'remove' parameter in /cart.php to execute arbitrary SQL commands. A publicly available proof-of-concept exploit exists, but the EPSS exploitation probability is very low (0.03%), indicating minimal real-world exploitation risk despite the remote attack vector. No active exploitation in the wild has been confirmed (CISA KEV not listed).