1000 Projects Bookstore Management System 1.0 search.php SQL Injection (CVE-2024-10844)

Key Information Vulnerability Name: 1000 Projects Bookstore Management System 1.0 Search.php SQL Injection Vulnerability ID: VDB-283089 CVE-2024-10844 Vulnerability Description: Affected Scope: 1000 Projects Bookstore Management System 1.0 Affected File: search.php Vulnerability Type: SQL Injection Impact Level: Unknown functionality affected Impact Scope: Unknown Vulnerability Impact: Impact Scope: Unknown Impact Level: Unknown Vulnerability Score: CVSS Meta Temp Score: 7.9 Vulnerability Price: Current Vulnerability Price: $0-$5k CTI Interest Score: CTI Interest Score: 0.15 Vulnerability Details: Vulnerability Description: The vulnerability is classified as severe and exists in the search.php file. Manipulating the parameter via unknown input leads to an SQL injection vulnerability. CWE classifies this issue as CWE-89. Impact Scope: The product constructs SQL commands using external, untrusted input, but does not properly neutralize or escape special elements that could alter downstream SQL commands. Impact Level: Affects confidentiality, integrity, and availability. Vulnerability Disclosure: Disclosure Platform: github.com Vulnerability ID: CVE-2024-10844 Vulnerability Type: SQL Injection Vulnerability Impact: Can be exploited remotely Disclosure Status: Publicly disclosed, potentially exploitable Exploit Proof: Proof of Concept Exploit Tool: Unknown Exploit Difficulty: Easy Exploit Method: Unknown Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method: Unknown Exploit Tools: Exploit Tool: Unknown Exploit Method:

Goal Reached Thanks to every supporter — we hit 100%!

1000 Projects Bookstore Management System 1.0 search.php SQL Injection (CVE-2024-10844)