CVE-2021-34249

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive information via the id paremeter in application URL.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-02-24

Last modified

2025-03-12

Weaknesses

CWE-89

Affected products

• Online Book Store (Online Book Store Project)

References

• https://packetstormsecurity.com/files/159000/Online-Book-Store-1.0-SQL-Injection.html
• https://www.exploit-db.com/exploits/48775