CVE-2024-55496

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55496
A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of add_company.php. Actions on the delete parameter result in SQL injection.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://1000projects.org/bookstore-management-system-php-mysql-project.html Product
https://github.com/wpc1122/CVE/issues/1 Exploit Third Party Advisory
https://github.com/wpc1122/CVE/issues/1 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:1000projects:bookstore_management_system:1.0:*:*:*:*:*:*:*
History

02 May 2025, 19:52

Type Values Removed Values Added
CPE cpe:2.3:a:1000projects:bookstore_management_system:1.0:*:*:*:*:*:*:*
First Time 1000projects
1000projects bookstore Management System
References () https://1000projects.org/bookstore-management-system-php-mysql-project.html - () https://1000projects.org/bookstore-management-system-php-mysql-project.html - Product
References () https://github.com/wpc1122/CVE/issues/1 - () https://github.com/wpc1122/CVE/issues/1 - Exploit, Third Party Advisory

20 Dec 2024, 21:15

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad en 1000projects Bookstore Management System PHP MySQL Project 1.0. Este problema afecta a algunas funciones desconocidas de add_company.php. Las acciones sobre el parámetro delete dan como resultado una inyección SQL.
CWE CWE-89
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1
References () https://github.com/wpc1122/CVE/issues/1 - () https://github.com/wpc1122/CVE/issues/1 -

17 Dec 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-17 18:15

Updated : 2025-05-02 19:52

NVD link : CVE-2024-55496

Mitre link : CVE-2024-55496

CVE.ORG link : CVE-2024-55496

JSON object : View

Products Affected

1000projects

  • bookstore_management_system
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')