Online Book Store Project Project Online Book Store Project — known CVE vulnerabilities

Every CVE whose affected-product data names Online Book Store Project Project Online Book Store Project, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-27250 — CVSS 9.8 (critical): Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php.
• CVE-2023-43739 — CVSS 9.8 (critical): The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database.