SQL Injection Vulnerability in 1000 Projects Bookstore Management System
CVE-2024-10968

9.8CRITICAL

Key Information:

Vendor: 1000 Projects
Status: Bookstore Management System
Vendor: CVE Published:; 7 November 2024

🔔 Create 1000 Projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2024-10968?

A serious security vulnerability has been identified in the 1000 Projects Bookstore Management System version 1.0, specifically targeting the functionality of the /contact_process.php file. This vulnerability allows attackers to manipulate the 'fnm' argument, leading to SQL injection attacks. Such an exploit can be executed remotely, potentially allowing unauthorized access to the underlying database, which may result in data leakage or data manipulation. Given that the exploit is publicly disclosed, users of the affected version are urged to take immediate action to mitigate this security risk.

Affected Version(s)

Bookstore Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-10968 - Proof of Concept