Carmelo Computer Book Store vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Carmelo Computer Book Store: 2 record(s), with affected versions and fixes.
cpe:2.3:a:carmelo:computer_book_store

CVE-2025-69559 Critical · 9.8 CWE-434 Jan 27, 2026

Computer Book Store 1.0 Unrestricted File Upload (CVE-2025-69559)

code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php.

CVE-2025-14647 Critical · 9.8 CWE-89 Dec 14, 2025

code-projects Computer Book Store admin_delete.php sql injection

A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.