SourceCodester Simple E-Commerce Bookstore vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SourceCodester Simple E-Commerce Bookstore: 3 record(s), with affected versions and fixes.
CVE-2025-11480
Critical · 9.8
CWE-89 Oct 8, 2025
SourceCodester Simple E-Commerce Bookstore register.php sql injection
A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument register_username results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVE-2025-11476
Critical · 9.8
CWE-89 Oct 8, 2025
SourceCodester Simple E-Commerce Bookstore index.php sql injection
A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument login_username leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
CVE-2025-11430
Critical · 9.8
CWE-89 Oct 8, 2025
SourceCodester Simple E-Commerce Bookstore cart.php sql injection
A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.php. The manipulation of the argument remove results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.