Lucene search
PRIOn knowledge basePRION:CVE-2020-36112HistoryJan 04, 2021 - 3:15 p.m.
Sql injection
2021-01-0415:15:00
PRIOn knowledge base
www.prio-n.com
CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application is running.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cse_bookstore | eq | 1.0 |
References
Related
cvelist
cvelist
CVE-2020-36112
2021-01-04 14:46:37
cve
cve
CVE-2020-36112
2021-01-04 15:15:16
checkpoint_advisories
checkpoint_advisories
CSE Bookstore SQL Injection (CVE-2020-36112)
2021-02-16 00:00:00
cnvd
cnvd
Projectworlds Online Book Store Project In Php SQL Injection Vulnerability
2021-01-06 00:00:00
nvd
nvd
CVE-2020-36112
2021-01-04 15:15:16
nuclei
nuclei
CSE Bookstore 1.0 - SQL Injection
2021-05-18 22:56:54