Vulnerability CVE-2024-6008


Published: 2024-06-15

Description:
A vulnerability, which was classified as critical, was found in itsourcecode Online Book Store up to 1.0. Affected is an unknown function of the file /edit_book.php. The manipulation of the argument image leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268698 is the identifier assigned to this vulnerability.

Type:

CWE-89

(Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

 References:
https://vuldb.com/?id.268698
https://vuldb.com/?ctiid.268698
https://vuldb.com/?submit.357143
https://github.com/1902zdq/cve/issues/1

Copyright 2026, cxsecurity.com

 

Back to Top