Bookstore Management System Vulnerability: Remote SQL Injection Exploitable
CVE-2024-10997

9.8CRITICAL

Key Information:

Vendor: 1000 Projects
Status: Bookstore Management System
Vendor: CVE Published:; 8 November 2024

🔔 Create 1000 Projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2024-10997?

A vulnerability in the 1000 Projects Bookstore Management System version 1.0 has been identified, affecting the /book_list.php file. This vulnerability arises from inadequate input validation, allowing remote attackers to manipulate the 'id' argument and execute arbitrary SQL queries on the connected database. Such SQL injection attacks can lead to unauthorized access to sensitive data, data modification, or even full database compromise. The disclosure of this vulnerability raises significant security concerns for users relying on this management system, necessitating immediate attention to prevent potential exploitation.

Affected Version(s)

Bookstore Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-10997 - Proof of Concept